Germany: Security requirements in NIS 2 Implementation and Cybersecurity Strengthening Act
Progress
Scope
Timeline of events
NIS 2 Implementation and Cybersecurity Strengthening Act including security requirements was passed by Parliament
On 13 November 2025, the NIS 2 Implementation and Cybersecurity Strengthening Act, including security requirements, was passed by the Parliament. It introduces a minimum set of risk measures, including incident-handling procedures, business continui…
SourceBerlin Commissioner for Data Protection submitted comments on Draft Act on implementation of NIS-2 Directive and on Regulation of essential principles of information security management in federal administration, including security requirements
On 4 July 2025, the Berlin Commissioner for Data Protection and Freedom of Information (BlnBDI) submitted comments on the Draft Act for the Implementation of the NIS-2 Directive and the Regulation of Essential Principles of Information Security Mana…
SourceUpdated draft NIS 2 Implementation and Cybersecurity Strengthening Act including security requirements was released
On 23 June 2025, the updated draft Act on the Implementation of the NIS-2 Directive and on the Regulation of Essential Principles of Information Security Management in the Federal Administration was released. The Act, proposed by the Federal Ministr…
SourceIssued draft NIS 2 Implementation and Cybersecurity Strengthening Act including security requirements
On 24 July 2024, the draft NIS 2 Implementation and Cybersecurity Strengthening Act, including security requirements, was adopted by the German Government. The Act transposes the Directive on measures for a high common level of cybersecurity across …
SourceAnnounced NIS 2 Implementation and Cybersecurity Strengthening Act including Security requirements
On 7 May 2024, the Federal Interior Minister presented the draft NIS 2 Implementation and Cybersecurity Strengthening Act, including security requirements. The Act transposes the Directive on measures for a high common level of cybersecurity across …
Source