# When must German companies register with the BSI?

Under section 33(1) of the BSIG, particularly important and important entities must register within three months. The clock starts when they first or again count as such, and they use the registration facility set up by the BSI and the BBK. They submit their name and legal form, address and contact data including public IP address ranges, their sector, the Member States they serve and their supervisory authorities. Operators of critical installations will register under section 8 of the KRITIS-Dachgesetz instead (section 33(2)), but only once the regulation identifying critical installations under that law is in force; until then, section 66 keeps the earlier wording of section 33(2) in effect, so follow the BSI's current instructions. Changes must be reported without undue delay and at the latest within two weeks of becoming known (section 33(5)). If an entity does not register, the BSI can register it itself in agreement with the supervisory authorities (section 33(3)), and failing to submit the details correctly or in time is an administrative offence that can be fined up to EUR 500,000 under section 65. Keep the registration confirmation with your NIS2 records.

General information, not legal advice. National laws can add to the EU texts quoted here, for example deadlines, forms or reporting channels: check your own country's rules.

FAQ: [Germany: BSIG](https://netsenx.com/en/faq/germany) · https://netsenx.com/en/faq/when-must-german-companies-register-with-the-bsi

## Read next

- https://netsenx.com/en/blog/2026-11-07_nis2-germany-bsig
- https://netsenx.com/en/nis2-incident-reporting-deadlines

## Related questions

- [Which German companies fall under the new BSIG?](https://netsenx.com/en/faq/which-german-companies-fall-under-the-bsig)
- [What is the difference between a particularly important and an important entity in Germany?](https://netsenx.com/en/faq/what-is-a-particularly-important-entity-in-germany)
- [Why does the BSI registration ask for our public IP address ranges?](https://netsenx.com/en/faq/why-does-bsi-registration-ask-for-public-ip-ranges)
- [What happens if we do not register with the BSI?](https://netsenx.com/en/faq/what-happens-if-we-do-not-register-with-the-bsi)
- [What is a system for attack detection (System zur Angriffserkennung) under the BSIG?](https://netsenx.com/en/faq/what-is-a-system-for-attack-detection-under-the-bsig)