Germany’s NIS2 Law Puts 30,000 Firms at Risk of €10 Million Fines as Compliance Deadline Looms

A looming regulatory deadline is forcing tens of thousands of German companies to overhaul their digital identity and security systems. By December 2025, roughly 30,000 organisations across 18 sectors must implement the EU’s NIS2 directive, which carries penalties of up to €10 million or two percent of global annual turnover for violations. The national transposition of the rules is set for this coming December.

The pressure coincides with the rollout of eIDAS 2.0, the updated European regulation on electronic identification and trust services. A key milestone arrives on 2 January 2027, when the EUDI Wallet — a digital identity wallet — must be supported across member states. The combined effect is pushing companies toward platforms that can handle qualified electronic signatures under eIDAS and meet NIS2’s stricter incident-response and governance requirements.

Providers are responding with infrastructure that keeps encryption and data control inside Europe. Omada, for instance, has announced a containerised identity solution expected to be available in early 2027. European organisations using it would retain full control over their cryptographic keys without relying on non-European vendors. Meanwhile, Docusign is rolling out a platform that incorporates an AI-based engine for identity management, capable of generating qualified electronic signatures under eIDAS.

The urgency is underscored by cyber-threat statistics. According to a Bitkom survey, 87 percent of German businesses have experienced a cyber incident. Against that backdrop, automated identity and access management tools are no longer optional but a compliance necessity.

Beyond regulation, technology shifts are reshaping how companies recruit and develop software. SAP plans a global launch of a new recruiting solution in September 2026, following its acquisition of SmartRecruiters in September 2025. The system will be embedded in the SuccessFactors environment. SAP itself hires between 20,000 and 25,000 people annually across 160 countries, and its AI agent Winston will assist candidates during the application process. Elsewhere in the cloud, Nokia has signed a multi-year agreement with SAP and Microsoft to migrate its SAP landscape to S/4HANA running on Azure, with AI functions added gradually.

Artificial intelligence is also compressing development timelines. The service provider Appsfactory has replaced the conventional software development lifecycle with a fully AI-driven process. In one fintech project, the time from planning to market readiness shrank from 24 person-weeks to two weeks.

Service-management efficiency is another focus. Matrix42 will host a webinar series in July and August 2026 on automating end-to-end processes, aiming to make ITSM and ESM structures future-proof through AI-generated documentation.

Yet the talent pipeline remains strained. Germany’s retail sector alone lacks more than 250,000 skilled workers, and the number of new apprentices has dropped 30 percent since 2010. Experts recommend digital recruitment tools and flexible working hours to boost retention.

The risks do not end when employees leave. Data from Wing Security reveals that 63 percent of companies still grant former staff access to internal systems. NewVision Software has published a guide that splits the offboarding process into eight distinct areas to plug these security holes.

Wasteful software spending adds another layer of cost pressure. Gartner forecasts that by 2028 over 70 percent of companies will centralise their SaaS management. Global SaaS expenditure in 2025 reached as high as $300 billion, with an estimated 25 percent of licences going unused. Automated platforms for identity and licence management can cut inefficiencies by up to 80 percent, a saving that becomes critical as compliance fines climb into the millions.

en | boerse | 69663947 |