- Regulatory13 Nov 2025Bundestag adopts the NIS2UmsuCG
21st Bundestag adopts the NIS2 transposition act (after the prior 20th-Bundestag bill lapsed at the January 2025 dissolution and was reintroduced).
- Regulatory05 Dec 2025Published in the Bundesgesetzblatt (BGBl 2025 I Nr. 301)
Ausfertigungsdatum 2 December 2025; published in BGBl 2025 I Nr. 301 on 5 December 2025.
- Regulatory06 Dec 2025NIS2UmsuCG enters into force
BSI: "tritt ab morgen eine umfassende Modernisierung des Cybersicherheitsrechts in Kraft" (press release 5 December 2025). KRITIS operators are automatically treated as "besonders wichtige Einrichtungen".
- Regulatory06 Dec 2025Incident reporting obligations apply
Reporting to the BSI Meldestelle is required from entry into force. See BSI Meldestelle for the operational channel.
- RegulatoryDec 2025· monthStep 1 — Mein Unternehmenskonto (MUK) registration
BSI guidance: in-scope entities should complete registration at Mein Unternehmenskonto (MUK) — BSI recommended doing so by end of 2025 — as the prerequisite for step 2.
- Regulatory06 Jan 2026Step 2 — BSI portal opens for NIS-2 entity registration
The new BSI portal for NIS-2 entity registration goes live on 6 January 2026. Registration is a two-step, rolling process; no single fixed cut-off announced by BSI.
Information is curated from public official sources and verified manually. It is not legal advice. Verify dates against the national authority's website before acting on a deadline.