Germany is implementing the European NIS2 Directive through a new implementation act, with expanded cyber-security compliance obligations for critical infrastructure operators taking effect in October 2026.