Germany Mandates Cyber Risk Assessments as Nearly a Third of Firms Ignore Systematic Safety Checks
28.06.2026 - 10:16:22 | boerse-global.de
More than one in four German companies still lack a structured workplace risk assessment — even as sweeping regulatory changes take effect that force firms to integrate cybersecurity threats into their safety planning. A survey conducted by the Gemeinsame Deutsche Arbeitsschutzstrategie (GDA) found that only 68 percent of businesses carry out systematic hazard evaluations, and within that group, 79 percent involve employees in the process.
Since January 2026, the updated technical rule TRBS 1115 has made it legally compulsory to consider cyber?security risks as part of the mandatory workplace risk assessment (Gefährdungsbeurteilung). The mandate comes on the back of a Bitkom estimate putting total damage from cyberattacks at €289.2 billion, with 73 percent of companies having suffered an attack. The rule change means safety officers and the designated safety specialist (Fachkraft für Arbeitssicherheit, Sifa) must now work together to channel frontline concerns up to decision?makers.
Many employers still underestimate the gap in their risk assessment processes — especially as new rules make cybersecurity a compulsory part of the evaluation. A free Risk Assessment Toolkit provides 41 ready-to-use templates and checklists to help you document hazards systematically and stay compliant. Download the free Risk Assessment Toolkit
Alongside the cyber?security shift, a revised version of the accident?insurance regulation DGUV Vorschrift 2 has been in force since the start of the year. It explicitly allows companies to use digital instruction for standardized safety topics such as data protection, fire prevention and the annual safety briefing. Theoretical content can be completed without a fixed time or place, though practical exercises still require in?person attendance. The Sifa now acts in an advisory capacity while overall responsibility for delivery and record?keeping remains with the employer. Fines of up to €30,000 can be levied for non?compliance. Specialized digital solutions already exist for sectors like metalworking, covering hazards such as sparks, welding fumes and noise exposure. From August 2026, new environment, health and safety (EHS) applications are expected to introduce intelligent automation into risk management.
In the machinery sector, a key standard has just been updated. The new edition of DIN EN 60204?1 (VDE 0113?1) was published in June 2026, specifying requirements for electrical equipment on machines before first commissioning. The EU Machinery Regulation 2023/1230 will become binding on 20 January 2027, while inspections of technical installations must continue to be performed only by qualified persons under TRBS 1203.
New qualification needs are also emerging in specialised trades. The revised EU F?Gas Regulation encourages the use of natural refrigerants; certified?knowledge seminars for work on systems using flammable refrigerants such as propane will begin in mid?July 2026. For pest?control firms, the Bundesrat has extended the deadlines for competency certificates (Sachkundenachweise) for the use of rodenticides to July 2030.
A recent ruling by the Landessozialgericht Darmstadt clarified accident?insurance coverage for home?office employees. Workers are now covered by statutory accident insurance on the way to get lunch — provided that journey serves to maintain their ability to work and starts or ends at the home workstation.
Structural changes are ahead for the statutory accident?insurance system. The Berufsgenossenschaft Energie Textil Elektro Medienerzeugnisse (BG ETEM) has approved a new hazard tariff that takes effect on 1 January 2027, which includes merging several electrical?installation activities into a single hazard class. For smaller firms with up to 50 employees, some Berufsgenossenschaften — such as the BGHM — continue to offer free basic seminars. One such session is scheduled for 1 July 2026 in Saarbrücken, covering duties under the Arbeitssicherheitsgesetz and the DGUV Vorschrift 2.
