NIS2 has applied in Germany since December 2025. Whether a business is in scope depends on sector, size and structure. Small businesses are often affected indirectly, as suppliers or service providers to customers in scope.
