(1) An entity of the type of entity named in section 60(1), first sentence is obliged, at the latest three months after it qualifies as one of the aforementioned entities, to transmit the following particulars to the BSI: 1. the entity's name; 2. the relevant sector, industry and type of entity as specified in Annex 1; 3. the address of its main establishment in the European Union under section 60(2) and of its other establishments in the European Union or, where it is not established in the European Union, the address of its representative designated under section 60(3); 4. current contact details, including e-mail addresses and telephone numbers of the entity and, where necessary, of its representative designated under section 60(3); 5. the Member States of the European Union in which the entity provides services, and 6. the entity's public IP address ranges.
(2) In the event of a change to the particulars transmitted under subsection (1), the entities of the type of entity named in section 60(1), first sentence notify the BSI of that change without delay, but at the latest within three months of the day the change occurred.
(3) With the exception of the particulars named in subsection (1), no. 6, the BSI forwards the particulars transmitted under this section to the European Union Agency for Cybersecurity.
(4) The BSI may provide a suitable reporting channel for the transmission of the particulars under subsections (1) and (2).
Home› Cybersecurity & IT Security› BSIG-EN
Part 3 · IT Security of Entities › Chapter 2 · Risk Management, Reporting, Registration, Verification and Notification Obligations › Section 34
Special registration obligation for particular types of entity
←→ also move between sections