Compliance Overload: German Companies Now Must Publish Salaries, Overhaul Pensions, and Treat Cyber Attacks as Safety Hazards

Human resources departments across Germany are grappling with a cascade of new legal obligations that took effect or were announced in June 2026. From mandatory salary ranges in job ads to pension contributions for mini-jobbers and a requirement to treat cyber threats as workplace hazards, the regulatory pressure is forcing companies to overhaul their payroll, recruiting, and IT systems simultaneously.

The EU Pay Transparency Directive entered into force on June 7, 2026, even though Germany has not yet passed its own national implementation law. Nevertheless, employees can already invoke the new rights directly. Job postings must now specify a salary range. Workers gain an individual right to request information about average pay for comparable positions, broken down by gender. Companies with more than 100 employees face additional reporting duties. Perhaps the most consequential shift: the burden of proof in discrimination lawsuits is reversed. Employers must now demonstrate that no pay inequality existed. Experts are urging businesses to audit their compensation structures immediately using software and to document everything transparently.

Keeping up with evolving workplace regulations is a challenge for employers everywhere. For UK businesses, a free Health & Safety Toolkit offers ready-to-use risk assessments, checklists and toolbox talks to help you meet your legal duties under the Health and Safety at Work Act. Download the free Health & Safety Toolkit

A ruling by the Federal Labor Court (BAG) on June 25, 2026, provided some relief in a different area. The court clarified that minor formal errors in mass-dismissal filings do not automatically invalidate the terminations. In the specific case, a company had announced 34 layoffs but actually only 31 or 32 positions were affected. The judges ruled that as long as the protective purpose of the notification is preserved, small discrepancies are tolerable. Omitting the notification entirely, however, remains grounds for dismissal.

On June 23, 2026, the pension reform commission released recommendations that will dramatically alter payroll calculations. Starting in 2028, an additional two-percentage-point contribution is planned, to be split equally between employers and employees. The block model in partial retirement (Altersteilzeit) is to be abolished. Mini-jobbers will become subject to mandatory pension insurance without the option to opt out. Self-employed workers and civil servants are also slated to be included in the statutory pension system.

The risks of automated HR processes were highlighted by a major failure at a British company earlier this year. A software upgrade led to incorrect payroll calculations for 53,000 employees. The error went unnoticed for 15 months, resulting in back payments with high interest. Compliance specialists stress the need for regular testing, especially for payroll software that automatically processes regulatory updates.

A growing threat in recruitment is identity fraud using deepfakes. Providers such as Validato now offer multi-step checks combining digital ID verification and liveness detection to prevent companies from falling victim to industrial espionage via fake applicant profiles. Starting July 10, 2027, the qualified electronic signature (QES) will become mandatory under the anti-money laundering regulation for certain sectors. HR platforms like Personio are already integrating QES functions, and partnerships between identity service providers such as Shufti and Evrotrust underline the push toward legally compliant digital signing.

Since mid-January 2026, companies have been required to include cybersecurity in their workplace risk assessments. The updated Technical Rule for Operational Safety (TRBS 1115) makes IT security a compulsory part of occupational safety — a move experts call overdue given cyberattacks that cause billions in damages.

With cybersecurity now a mandatory part of workplace risk assessments, having the right templates is crucial. The free Risk Assessment Toolkit includes 41 customizable templates for various hazards, so you can document risks efficiently and maintain compliance. Download the free Risk Assessment Toolkit

Finally, plans for the electronic patient record (ePA) are drawing criticism. The professional association of German psychologists (BDP) warned that the draft bill for the Health Digital Act (GeDIG) would allow company doctors to access sensitive data without the explicit consent of employees. The association fears that psychotherapeutic findings could become available for employer counseling, jeopardizing data protection.

en | boerse | 69637558 |