BSI sets new NIS2 registration deadline for end of July as compliance lags

Summary

The German Federal Office for Information Security (BSI) is tightening enforcement of the NIS2 directive implementation but continues to prioritize cooperation. Since the amended BSI Act took effect on December 6, 2025, affected companies must register with the BSI to prevent disruptions and security incidents in entities critical to the economy and society. The legal registration deadline expired on March 6, but implementation is lagging. In a letter obtained by heise online, the BSI is now setting a new deadline at the end of July for companies to comply with registration requirements.