Orders of measures by the BSI against providers of digital services

The BSI may, in individual cases, to avert significant dangers to the information technology systems of a large number of users arising from digital services of providers of digital services under section 2(2), no. 1 of the Telecommunications and Digital Services Data Protection Act, that are inadequately secured on account of insufficient technical and organisational precautions under section 19(4) of the Telecommunications and Digital Services Data Protection Act and thereby offer no adequate protection against 1. unauthorised access to the technical facilities used for those digital services, or 2. disruptions, including those caused by external attacks, order the respective provider of digital services under section 2(2), no. 1 of the Telecommunications and Digital Services Data Protection Act to take the technical and organisational measures necessary to establish the proper condition of its digital services. The competence of the Länder's supervisory authorities otherwise remains unaffected.