As 2026 gets underway, the European Union enters a pivotal year for data protection, AI governance, and cybersecurity regulation, among other matters. EU institutions and national authorities are expected to progress a number of significant digital‑policy files, roll‑out new cyber‑resilience obligations, and make transparency in the privacy space a top priority. Below is an overview of the key developments to monitor.
Continue Reading What to Watch in 2026: Key EU Privacy & Cybersecurity Developments
Clemens Jaaks
Clemens Jaaks is an associate in Covington’s IP/IT team in Frankfurt. He focuses on IT law, outsourcing, cloud-services, digitalization/industry 4.0, technology and data driven licensing deals, e-commerce and data protection.
Germany Transposes NIS 2 Directive – Increased Cybersecurity Requirements for Businesses
On 5 December 2025, the Act Transposing the NIS 2 Directive and Regulating Key Aspects of Information Security Management in the Federal Administration (Gesetz zur Umsetzung der NIS-2-Richtlinie und zur Regelung wesentlicher Grundzüge des Informationssicherheitsmanagements in der Bundesverwaltung (“NIS2UmsG”) (see here, in German only) became binding in Germany. According to the Federal Office for Information Security (Bundesamt für Sicherheit in der Informationstechnik (“BSI”) (see here, in German only), roughly 29,500 companies will have to comply with the increased cybersecurity requirements adopted by the NIS2UmsG.
Continue Reading Germany Transposes NIS 2 Directive – Increased Cybersecurity Requirements for Businesses