Headlines

Germany approves new rules to protect critical infrastructure

Published by Global Banking & Finance Review

Posted on September 10, 2025

2 min read

· Last updated: January 22, 2026

Add as preferred source on Google
Russian bomb factory acquiring Siemens technology amid sanctions - Global Banking & Finance Review
Image illustrating the Biysk Oleum Factory's acquisition of Siemens equipment via intermediaries, highlighting the circumvention of Western sanctions. This reflects ongoing military production efforts in Russia.
Global Banking & Finance Awards 2026 — Call for Entries

By Markus Wacket Berlin, September 10 (Reuters) -The German government approved new rules on Wednesday that legally oblige operators of critical infrastructure in the country to protect their plants

Germany Enacts New Regulations to Safeguard Critical Infrastructure

By Markus Wacket

Berlin, September 10 (Reuters) -The German government approved new rules on Wednesday that legally oblige operators of critical infrastructure in the country to protect their plants and networks.

The rules come in response to a sharp deterioration in the security environment since Russia's 2022 full-scale invasion of Ukraine and a growing awareness of Europe's vulnerability to natural disasters and sabotage or terrorist attacks on infrastructure.

The KRITIS law, which implements a European Union directive, obligates companies in sectors like energy, transport, finance, health and water to secure their installations.

That could include measures like building barbed-wire fences around power stations or installing security cameras and motion detectors. Companies must prepare inventories of vulnerable infrastructure and register them.

Authorities have been warning of the growing risks to critical infrastructure of sabotage by Russia or cyberattacks from China. They have blamed Russia for a series of firebomb attacks on mail infrastructure in Germany and Poland.

Both countries deny they conduct such campaigns.

At a minimum, German companies would have to examine their risk exposure, prepare resilience plans and report major outages to authorities, who can impose fines on entities that fail to follow the rules.

Under the law, infrastructure that provides services to at least 500,000 people counts as critical.

(Reporting by Markus Wacket; Writing by Thomas Escritt; Editing by Bernadette Baum)

Key Takeaways

  • Germany has approved new regulations to protect critical infrastructure.
  • The KRITIS law requires companies to secure installations in key sectors.
  • The law responds to increased threats since Russia's invasion of Ukraine.
  • Companies must prepare risk inventories and resilience plans.
  • Authorities can impose fines for non-compliance with the new rules.

Frequently Asked Questions

What is the KRITIS law?
The KRITIS law is a regulation in Germany that mandates operators of critical infrastructure to implement security measures to protect their facilities and networks.
Why were these new rules introduced?
The new rules were introduced in response to the deteriorating security environment following Russia's invasion of Ukraine and the increasing awareness of vulnerabilities to natural disasters.
What sectors are affected by the KRITIS law?
The KRITIS law affects several sectors, including energy, transport, finance, health, and water, requiring them to secure their installations.
What are the consequences for non-compliance with the new rules?
Companies that fail to comply with the KRITIS law can face fines imposed by authorities, emphasizing the importance of adhering to the new security measures.
What minimum requirements must companies meet under the new law?
Under the KRITIS law, companies must assess their risk exposure, prepare resilience plans, and report major outages to authorities.

Tags

Related Articles

More from Headlines

Explore more articles in the Headlines category