NIS 2 Directive:
What Real Estate Operators Need to Know – Requirements, Obligations, and Measures
Requirements, Obligations, Measures: Six Steps from Risk to Compliance!
Under the NIS 2 Directive (Network and Information Security Directive 2), the EU requires all member states to ensure a higher level of cybersecurity. The German implementation was adopted in November 2025 and will take effect as early as the end of 2025. Real estate companies and operators may also be subject to the law, even if IT is not their core business. Use this checklist to find out whether you are affected and what steps you should take:
