Section 2, nos. 22 and 24, and section 33(2) and (5), do not apply until a statutory instrument on the basis of section 4(3) and section 5(1) of the Critical Infrastructure Umbrella Act has entered into force. Until that statutory instrument enters into force, section 2, nos. 22 and 24, and section 33(2), in the version in force up to and including 16 March 2026, and section 33(5), in the version in force up to and including 28 July 2026, continue to apply.
Annex 1
Sectors of Essential and Important Entities
(Source: Federal Law Gazette 2025 I No. 301, pp. 43-46)
Column A Column B Column C Column D No. Sector Subsector Type of entity 1 Energy 1.1 Electricity 1.1.1 Electricity suppliers under section 3, no. 31c EnWG 1.1.2 Operators of electricity distribution networks under section 3, no. 3 EnWG 1.1.3 Transmission system operators under section 3, no. 10 EnWG 1.1.4 Operators of generation installations under section 3, no. 18d EnWG 1.1.5 Nominated electricity market operators under Article 2, point 8 of Regulation (EU) 2019/943 1.1.6 Aggregators under section 3, no. 1a EnWG 1.1.7 Operators of energy storage facilities under section 3, no. 15d EnWG 1.1.8 Providers of balancing services under section 3, no. 1b EnWG 1.1.9 Charging point operators under section 2, no. 8 LSV 1.2 District heating or district cooling 1.2.1 Operators of district heating or district cooling within the meaning of section 3, no. 19 or no. 20 GModG 1.3 Fuel and heating-oil supply 1.3.1 Operators of oil pipelines 1.3.2 Operators of installations for the production, refining and treatment of petroleum, and operators of petroleum storage facilities and oil pipelines 1.3.3 Central stockholding entities under Article 2(f) of Directive 2009/119/EC 1.4 Gas 1.4.1 Operators of gas distribution networks under section 3, no. 8 EnWG 1.4.2 Operators of transmission networks under section 3, no. 5 EnWG 1.4.3 Operators of gas storage facilities under section 3, no. 6 EnWG 1.4.4 Operators of LNG facilities under section 3, no. 9 EnWG 1.4.5 Gas suppliers under section 3, no. 19b EnWG 1.4.6 Operators of installations for the extraction of natural gas 1.4.7 Operators of installations for the refining and treatment of natural gas 1.4.8 Operators in the field of hydrogen production, storage and transmission 2 Transport 2.1 Air transport 2.1.1 Air carriers under Article 3, point 4 of Regulation (EC) No 300/2008, used for commercial purposes 2.1.2 Airport managing bodies under Article 2, point 2 of Directive 2009/12/EC, airports under Article 2, point 1 of that Directive, including the core network airports listed in Annex II, Section 2 of Regulation (EU) No 1315/2013, and entities operating ancillary installations contained within airports 2.1.3 ATM/ANS providers under Article 2, point 2 of Implementing Regulation (EU) 2017/373 2.2 Rail transport 2.2.1 Railway infrastructure managers under section 2(6) and (6a) AEG, including central entities that dispatch train operations proactively and in the event of unexpected occurrences 2.2.2 Railway undertakings under section 2(3) AEG, including operators of a service facility under section 2, no. 9 AEG 2.3 Water transport 2.3.1 Inland, sea and coastal shipping passenger and freight water transport companies, as defined for maritime transport in Annex I to Regulation (EC) No 725/2004, excluding the individual vessels operated by those companies 2.3.2 Managing bodies of ports under Article 3, point 1 of Directive 2005/65/EC, including their port facilities under Article 2, point 11 of Regulation (EC) No 725/2004, and entities operating installations and equipment contained within ports 2.3.3 Operators of an installation or system for the safe operation of a waterway within the meaning of section 1(6), no. 1 WaStrG 2.4 Road transport 2.4.1 Operators of an installation or system for traffic control in road transport, including the entities named in section 1(4), nos. 1, 3 and 4 FStrG, for example traffic, operations and tunnel control centres, drainage installations, intelligent transport systems and specialist offices for information technology and security in road construction, and the telecommunications networks of the federal motorways 2.4.2 Operators of an intelligent transport system under section 2, no. 1 IVSG 3 Finance 3.1 Banking 3.1.1 Credit institutions: undertakings whose business is to take deposits or other repayable funds from the public and to grant credits for own account 3.2 Financial market infrastructures 3.2.1 Trading venues within the meaning of section 2(22) WpHG 3.2.2 Central counterparties that interpose themselves between the counterparties to the contracts traded on one or more markets and thus act as buyer to every seller and seller to every buyer 4 Health 4.1.1 Providers of healthcare within the meaning of Directive 2011/24/EU 4.1.2 EU reference laboratories under Article 15 of Regulation (EU) 2022/2371 4.1.3 Undertakings carrying out research and development activities relating to medicinal products under section 2 AMG 4.1.4 Undertakings manufacturing pharmaceutical products under Section C, Division 21 of the Statistical Classification of Economic Activities in the European Community (NACE Rev. 2) 4.1.5 Undertakings manufacturing medical devices classified as critical during a public health emergency under Article 22 of Regulation (EU) 2022/123 ("list of critical medical devices for public health emergencies") 5 Water 5.1 Drinking-water supply 5.1.1 Operators of water supply installations within the meaning of section 2, no. 3 TrinkwV, excluding suppliers for which the supply of water for human consumption is not a significant part of their general activity of supplying other raw materials and goods 5.2 Waste-water disposal 5.2.1 Undertakings that collect, dispose of or treat waste water under section 54(1) WHG, excluding undertakings for which the collection, disposal or treatment of such waste water is not a significant part of their general activity 6 Digital infrastructure 6.1.1 Operators of Internet Exchange Points 6.1.2 DNS service providers, excluding operators of root name servers 6.1.3 Top Level Domain Name Registry 6.1.4 Providers of cloud computing services 6.1.5 Providers of data centre services 6.1.6 Operators of content delivery networks 6.1.7 Trust service providers 6.1.8 Operators of public telecommunications networks 6.1.9 Providers of publicly available telecommunications services 6.1.10 Managed service providers 6.1.11 Managed security service providers 7 Space 7.1.1 Operators of ground infrastructure that are owned, managed and operated by Member States or private parties, and that support the provision of space-based services, excluding providers of public electronic communications networks
Annex 2
Sectors of Important Entities
(Source: Federal Law Gazette 2025 I No. 301, pp. 47-48)
Column A Column B Column C Column D No. Sector Subsector Type of entity 1 Transport 1.1 Postal and courier services 1.1.1 Providers of postal services under section 3, no. 15 PostG, including providers of courier services 2 Waste management 2.1.1 Waste management undertakings under section 3(14) KrWG, excluding undertakings for which waste management is not their main economic activity 3 Production, manufacture and distribution of chemicals 3.1.1 Manufacturers and importers under Article 3, points 9 and 11 of Regulation (EC) No 1907/2006 of chemical substances and mixtures within the meaning of Article 3, points 1 and 2 of that Regulation, provided they fall within Category 20 of the Statistical Classification of Economic Activities in the European Community (NACE Rev. 2) and are subject to the registration obligation under Article 6 of that Regulation 4 Production, processing and distribution of food 4.1.1 Food undertakings under Article 3, point 2 of Regulation (EC) No 178/2002 that are engaged in wholesale distribution and industrial production and processing 5 Manufacturing 5.1 Manufacture of medical devices and in vitro diagnostic medical devices 5.1.1 Undertakings manufacturing medical devices under Article 2, point 1 of Regulation (EU) 2017/745, and undertakings manufacturing in vitro diagnostic medical devices under Article 2, point 2 of Regulation (EU) 2017/746, excluding undertakings manufacturing medical devices classified as critical during a public health emergency under Article 22 of Regulation (EU) 2022/123 ("list of critical medical devices for public health emergencies") 5.2 Manufacture of computer, electronic and optical products 5.2.1 Undertakings carrying out an economic activity under Section C, Division 26 of the Statistical Classification of Economic Activities in the European Community (NACE Rev. 2) 5.3 Manufacture of electrical equipment 5.3.1 Undertakings carrying out an economic activity within the meaning of Section C, Division 27 of the Statistical Classification of Economic Activities in the European Community (NACE Rev. 2) 5.4 Manufacture of machinery and equipment 5.4.1 Undertakings carrying out an economic activity under Section C, Division 28 of the Statistical Classification of Economic Activities in the European Community (NACE Rev. 2) 5.5 Manufacture of motor vehicles, trailers and semi-trailers 5.5.1 Undertakings carrying out an economic activity under Section C, Division 29 of the Statistical Classification of Economic Activities in the European Community (NACE Rev. 2) 5.6 Manufacture of other transport equipment 5.6.1 Undertakings carrying out an economic activity under Section C, Division 30 of the Statistical Classification of Economic Activities in the European Community (NACE Rev. 2) 6 Digital providers 6.1.1 Providers of online marketplaces 6.1.2 Providers of online search engines 6.1.3 Providers of social networking services platforms 7 Research 7.1.1 Research institutions