Berlin, 24.07.24 – The Federal Cabinet today passed the law to implement the NIS2 Directive and strengthen cyber security. Stephan Albers, Managing Director of the German Broadband Association (BREKO), comments:

“Telecommunications networks are the digital lifelines for the economy and society. A number of industries and companies, as well as critical infrastructures such as hospitals and public administration, depend on the smooth functioning of data networks. Protecting them is therefore a top priority! Accordingly, telecommunications companies have been investing in IT and network security for a long time, even without a legal obligation – for their own protection and, in particular, for the protection of their customers.

Nevertheless, we welcome the fact that the new law transposes the EU-wide minimum standards for cybersecurity into German law and thus creates legal certainty for companies in this country. This is because the law describes an appropriate level of protection for IT security. Those who implement the legal requirements are therefore also on the safe side in terms of liability.

It is also to be welcomed that the new law largely avoids double regulation by including a broad exemption. However, the new regulation also means that a large number of telecommunications companies will be obliged to comply with critical infrastructure protection requirements for the first time. This must be taken into account in the deadline for implementing the legal requirements. We are therefore calling for an appropriate implementation period of at least twelve months to be included in the parliamentary legislative process.”