Does NIS2 apply to your company?
Your class, deadlines and fine ceiling under the national law.
Result for Germany: Important entity.
Germany, under the BSIG
Yes, NIS2 applies to you.
Important entity
In the law: wichtige Einrichtung
Register within
3 months after you come into scope
Day-1 deadline 2026-03-06 passed: register now.
- Fine ceiling
- EUR 7,000,000
Get this result as a PDF
- Your duties, logins and the 10 minimum measures.
- An alert when the rules change.
Your duties in Germany
| Register | Overdue if in scope from the startIf you were in scope at the start, the deadline was 2026-03-06: register now. If you came into scope later, you have 3 months from that date. Portal: BSI portal |
|---|---|
| Report incidents |
Final report: 1 month after the notification. Send to the joint BSI/BBK reporting office, through the BSI portal. |
| Measures and proof | The BSI supervises after the fact, for example after an incident. Keep evidence of your measures ready. |
| Fine ceiling | The higher of EUR 7,000,000 or 1.4% of the worldwide annual turnover of your group. At EUR 8m, the fixed amount is higher. |
| ISO 27001 | ISO 27001 helps as evidence. It does not prove BSIG compliance on its own. |
The same company in each country
| Country | Class | Registration | ISO 27001 |
|---|---|---|---|
| Important | Due in 58 days | Accepted as proof | |
| Important | Deadline passed | Presumption of conformity | |
| Important | Authority names you | Not named in the law | |
| Important | Authority names you | Not named in the law | |
| Important | No fixed date | Not named in the law | |
| Important | Deadline passed | Helps, not enough alone | |
| Important | Passed for day-1 entities | Helps, not enough alone | |
| Important | Passed for day-1 entities | Presumption of conformity | |
| Important | Passed for day-1 entities | Not named in the law | |
| Bill | Important | No duty yet | Helps, not enough alone |
| Important | Passed for day-1 entities | Helps, not enough alone | |
| Important | Deadline passed | Not named in the law | |
| Important | Within 30 days of scope | Helps, not enough alone | |
| Bill | Important | No duty yet | Helps, not enough alone |
| Important | Next window | Helps, not enough alone | |
| Important | Passed for day-1 entities | Not named in the law | |
| Important | Deadline passed | Helps, not enough alone | |
| Important | Deadline passed | Not named in the law | |
| Important | No fixed date | Not named in the law | |
| Important | Deadline passed | Helps, not enough alone | |
| Important | Passed for day-1 entities | Not named in the law | |
| Important | Within 30 days of scope | Presumption of conformity | |
| Important | Within 30 days of scope | Not named in the law | |
| Important | Within 60 days of scope | Not named in the law | |
| Important | Passed for day-1 entities | Helps, not enough alone | |
| Bill | Important | No duty yet | Helps, not enough alone |
| Important | No fixed date | Not named in the law |
How the check works 45 s
A 60-person SaaS company in Austria: its class, registration deadline and fine ceiling, then the same company in 8 countries.