Bottom line: Fewer than 40% of NIS2-regulated enterprises met the registration deadline.
Only 39 percent of entities subject to the NIS2 Directive have registered with the competent authorities by the deadline of 31 July 2024. The rate reveals significant implementation deficits in the German economy.
Based on evaluations of received notifications, only 39 percent of affected enterprises in Germany submitted their mandatory registration pursuant to the NIS2 Directive by 31 July. This means that the majority of regulated companies have either missed the deadline or have not yet responded.
For CISOs and IT security officers, this is a critical indicator: the low compliance rate points to systematic delays in implementing the EU directive, which has been binding since October 2024. Enterprises that fail to fulfil their registration obligation risk fines and supervisory consequences.
The rate also reflects operational challenges: many organisations require time to inventory their critical systems, document their security measures, and coordinate with regulatory authorities. Enterprises that have not yet registered should immediately contact their regulatory authorities and clarify the status of their registration.
Source: news.google.com · Published 11 July 2026
Lumi AI News — AI-assisted curation pursuant to Article 50 EU AI Act. Paraphrase and classification by Lumi News Pipeline v1.7.3.