Registration obligation

(1) Essential entities and important entities, and domain name registry service providers, are obliged, at the latest three months after they first, or again, qualify as one of the aforementioned entities or offer domain name registry services, to transmit the following particulars to the BSI, through a registration facility jointly established by the BSI and the Federal Office of Civil Protection and Disaster Assistance: 1. the entity's name, including its legal form and, where applicable, its commercial register number, 2. address and current contact details, including e-mail address, public IP address ranges and telephone numbers, 3. the relevant sector or, where applicable, industry, named in Annex 1 or 2, 4. a list of the Member States of the European Union in which the entity provides services of the types of entity named in Annex 1 or 2, and 5. the federal and Land supervisory authorities competent for the activities on account of which registration takes place.
(2) The registration of critical facilities takes place under section 8 of the Critical Infrastructure Umbrella Act.
(3) The BSI may also itself carry out the registration of essential entities and important entities and domain name registry service providers, in agreement with the respective competent supervisory authorities, where their registration obligation is not fulfilled.
(4) Where facts justify the assumption that an entity is not fulfilling its registration obligation under subsection (1) or (2), that entity must, at the BSI's request, submit to it, in a suitable manner, the records, documents and other papers that the BSI considers necessary for the assessment, and provide information, insofar as secrecy-protection interests or predominant security interests do not preclude this.
(5) Where particulars to be transmitted under subsection (1) change, those changes must be transmitted to the BSI without delay, at the latest within two weeks of the time the entity became aware of the change.
(6) The BSI determines the details of the arrangement of the registration procedure in agreement with the Federal Office of Civil Protection and Disaster Assistance. The determination under the first sentence is made by public notice on the BSI's website.