A US Supreme Court decision declaring independent supervisory authorities unconstitutional jeopardizes the legal basis of the EU-US data transfer agreement.
The Northern Thuringia region shows a high percentage of companies that have not yet met NIS2 requirements – the Chamber of Industry and Commerce warns of impending consequences.
The Hamburg Higher Regional Court has suspended the Meta proceedings over data protection violations and awaits an admissibility decision from the Court of Justice of the European Union.
NIS2 requires organizations from October to extend cybersecurity requirements to supply chains and include third-party providers in continuous security assessments.
Germany is implementing the European NIS2 Directive through a new implementation act, with expanded cyber-security compliance obligations for critical infrastructure operators taking effect in October 2026.