Germany: Expansion of Federal Office for Information Security's powers in NIS 2 Implementation and Cybersecurity Strengthening Act

Progress

Current status
in force
06 Dec 2025 in force
02 Dec 2025 adopted
13 Nov 2025 adopted
04 Jul 2025 under deliberation
23 Jun 2025 under deliberation
24 Jul 2024 under deliberation
07 May 2024 under deliberation

Scope

Implementers
Germany
Policy Area
Data governance
Policy Instrument
Data protection authority governance
Regulated Economic Activity
cross-cutting
Government Branch
executive
legislature
Government Body
central government
parliament
data protection authority
Implementation Level
national

Timeline of events

06 Dec 2025
in force

NIS 2 Implementation and Cybersecurity Strengthening Act including provisions expanding Federal Office for Information Security powers entered into force

On 6 December 2025, the NIS 2 Implementation and Cybersecurity Strengthening Act including provisions expanding Federal Office for Information Security powers entered into force one day after its official publication. The Act introduces expansions t…

Source
Event type law
Action type implementation
Government branch executive
Government body central government
02 Dec 2025
adopted

President signed NIS 2 Implementation and Cybersecurity Strengthening Act including provisions expanding Federal Office for Information Security powers

On 2 December 2025, the President signed the NIS 2 Implementation and Cybersecurity Strengthening Act including provisions expanding Federal Office for Information Security powers. The Act will enter into force one day after its official publication…

Source
Event type law
Action type signing
Government branch executive
Government body central government
13 Nov 2025
adopted

NIS 2 Implementation and Cybersecurity Strengthening Act including provisions expanding Federal Office for Information Security powers was passed by Parliament

On 13 November 2025, the NIS 2 Implementation and Cybersecurity Strengthening Act including provisions expanding Federal Office for Information Security powers was passed by the Parliament. The Act introduces expansions to the powers of the Federal …

Source
Event type law
Action type adoption
Government branch legislature
Government body parliament
04 Jul 2025
under deliberation

Berlin Commissioner for Data Protection submitted a formal position on Draft Act Implementing NIS-2 Directive, including provisions expanding Federal Office for Information Security powers

On 4 July 2025, the Berlin Commissioner for Data Protection and Freedom of Information (BlnBDI) submitted a formal position on the draft German Act implementing Directive (EU) 2022/2555 (NIS-2) and establishing essential principles of information se…

Source
Event type law
Action type opinion
Government branch executive
Government body data protection authority
23 Jun 2025
under deliberation

Updated draft NIS 2 Implementation and Cybersecurity Strengthening Act including provisions expanding Federal Office for Information Security powers was released

On 23 June 2025, the updated draft Act on the Implementation of the NIS-2 Directive and on the Regulation of Essential Principles of Information Security Management in the Federal Administration was released. The Act, proposed by the Federal Ministr…

Source
Event type law
Action type drafting
Government branch executive
Government body central government
24 Jul 2024
under deliberation

Issued draft NIS 2 Implementation and Cybersecurity Strengthening Act including provisions expanding Federal Office for Information Security powers

On 24 July 2024, the draft NIS 2 Implementation and Cybersecurity Strengthening Act, including provisions expanding Federal Office for Information Security (BIS) powers, was adopted by the German Government. The Act transposes the Directive on measu…

Source
Event type law
Action type drafting
Government branch legislature
Government body parliament
07 May 2024
under deliberation

Announced NIS 2 Implementation and Cybersecurity Strengthening Act including provisions expanding Federal Office for Information Security powers

On 7 May 2024, the Federal Interior Minister presented the draft NIS 2 Implementation and Cybersecurity Strengthening Act, including provisions expanding Federal Office for Information Security (BIS) powers. The Act transposes the Directive on measu…

Source
Event type law
Action type announcement
Government branch executive
Government body central government