Germany NIS2 (NIS2UmsuCG)

Germany: NIS2-regulated entities must register with the BSI

The NIS2UmsuCG (rewriting the BSI-Gesetz) was published in the Bundesgesetzblatt on 2025-12-05 and entered into force on 2025-12-06; §33 BSIG then gave affected entities 3 months to register, i.e. by 2026-03-06. The BSI subsequently allowed late registration up to 2026-07-31 as a grace period. Both dates have passed as of lastVerified; kept for reference and because the same 3-month registration clock also applies to any entity that newly falls into scope later.

Medium and large companies (and some smaller companies in specific sectors such as trust services, DNS or public electronic communications) operating in the 18 NIS2 sectors listed in BSIG Annex 1/2.