Germany: Cybersecurity regulation and voluntary IT security label in Security of Information Technology Systems (IT Security Act 2.0)

Progress

Current status
in force
28 May 2021 in force
07 May 2021 adopted
01 Jan 2021 under deliberation

Scope

Implementers
Germany
Policy Area
Data governance
Policy Instrument
Cybersecurity regulation
Regulated Economic Activity
infrastructure provider: internet and telecom services
technological consumer goods
software provider: other software
infrastructure provider: network hardware and equipment
Government Branch
legislature
Government Body
parliament
Implementation Level
national

Timeline of events

28 May 2021
in force

Implemented Second Law to increase the security of Information Technology Systems ( IT Security Act 2.0) including cybersecurity regulation and voluntary IT security label

On 28 May 2021, the Security of Information Technology Systems (IT Security Act 2.0) including cybersecurity regulation and voluntary IT security label, entered into force. The Act expands the list of critical sectors and establishes a new category,…

Source
Event type law
Action type implementation
Government branch legislature
Government body parliament
07 May 2021
adopted

Adopted Second Law to increase the security of Information Technology Systems ( IT Security Act 2.0) including cybersecurity regulation and voluntary IT security label

On 7 May 2021, the Security of Information Technology Systems (IT Security Act 2.0) including cybersecurity regulation and voluntary IT security label, was adopted. The Act expands the list of critical sectors and establishes a new category, compani…

Source
Event type law
Action type adoption
Government branch legislature
Government body parliament
01 Jan 2021
under deliberation

Introduced Second Law to increase the security of Information Technology Systems ( IT Security Act 2.0) including cybersecurity regulation and voluntary IT security label

On 1 January 2021, the Security of Information Technology Systems (IT Security Act 2.0) including cybersecurity regulation and voluntary IT security label, was introduced in the German Parliament. The Act would expand the list of critical sectors an…

Source
Event type law
Action type introduction
Government branch legislature
Government body parliament