In a nutshell: Nearly 30,000 German companies must register their classification as critical or important infrastructure with the authorities by July 31.
In Germany, approximately 29,500 companies must register their classification as critical or important infrastructure with the competent authority by July 31. This registration deadline is a key step in implementing the NIS2 Directive.
The registration applies to organisations in the sectors covered by the NIS2 Directive – including energy, transport, water, health, digital infrastructure, public administration and other critical areas. The classification as “critical” or “important” infrastructure is determined by the size, geographic distribution and impact of a failure on supply security.
Registration is mandatory for affected companies: they must demonstrate that they fall within the relevant sector classification and which classification is assigned to them. The competent authorities use this data to coordinate their supervision and compliance requirements.
Classification as critical or important infrastructure entails concrete obligations: these include the implementation of security measures, regular risk assessments, notification requirements in case of security incidents and, in individual cases, external audits. Companies should therefore complete their registration promptly and at the same time advance their technical and organisational measures for NIS2 compliance.
Source: news.google.com · Published July 18, 2026
Lumi AI News — AI-assisted curation in accordance with Article 50 EU AI Act. Paraphrase and classification by Lumi News Pipeline v1.7.3.