Catalogue of requirements

(1) In implementing the obligations under sections 176 to 179, a particularly high standard of data security and data quality is to be ensured. Compliance with this standard is presumed where all the requirements of the catalogue of technical precautions and other measures are satisfied, which the Federal Network Agency draws up in consultation with the Federal Office for Information Security and the Federal Commissioner for Data Protection and Freedom of Information.
(2) The Federal Network Agency continuously reviews the requirements contained in the catalogue under subsection (1), second sentence; in doing so, it has regard to the state of the art and of expert discussion. Where the Federal Network Agency determines a need for amendment, the catalogue is to be adapted without delay, in consultation with the Federal Office for Information Security and the Federal Commissioner for Data Protection and Freedom of Information.
(3) Section 167(1), third sentence, applies correspondingly. The catalogue of requirements is published by the Federal Network Agency. Section 165(9), first and fifth sentences, applies, with the proviso that the requirements under subsection (1), first sentence, section 176(7) and (8), section 178, and section 179(1) and (3) replace the requirements under section 165(1) to (7).