{ "sprache": "en", "fuer": "1.1.0", "hinweis": "English presentation layer for the language-neutral rule set in regelwerke.v1.json. Thresholds, dates and conditions live only in that file; this one carries nothing but wording. Names of German statutes are kept in the original with an English gloss.", "ui": { "inForce": "in force", "upcoming": "applies later", "notMet": "threshold not met", "today": "today", "stages": "Stages", "whatIsRequired": "What is required", "whatToDo": "What has to be done", "criteria": "Criteria", "sanction": "Penalty", "source": "Source", "basis": "Basis", "lastChecked": "last checked", "reviewCycle": "review cycle", "classification": "Classification", "note": "Note", "employees": "employees", "employeesDomestic": "of which in Germany", "turnover": "Turnover", "balance": "Balance sheet total", "millionEuro": "million EUR", "aiUse": "Use of AI", "ruleSet": "Rule set", "asOf": "as of", "missing": "short by", "oneRegime": "one regime applies today", "someRegimes": "regimes apply today", "forThisProfile": "For this profile ", "noneApply": "none of the nine regimes applies to this profile at present. Raise the size figures or select a business characteristic.", "oneUpcoming": "One more follows", "moreUpcoming": "more follow", "nextOn": ", the next on ", "noneUpcoming": " Nothing further is scheduled before 2030 as the law stands today.", "stagesUntil": "Stages until ", "once": "one-off", "ongoing": "ongoing", "annual": "annual", "deadline": "deadline-bound", "inForceSince": "in force since ", "reset": "Reset", "copyLink": "Copy link", "linkCopied": "Link copied", "printRecord": "Print record", "downloadJson": "Download result as JSON" }, "felder": { "form": "Legal form", "emp": "Employees, group-wide", "empDe": "Employees in Germany", "rev": "Turnover", "bal": "Balance sheet total", "nis": "Sector under the BSIG", "branche": "Sector", "ai": "Use of AI", "b2c": "Digital consumer offering", "pack": "Packaging placed on the German market", "comm": "Commodities under EUDR Annex I", "listed": "Listed on a regulated market" }, "hinweise": { "b2c": "Online shop, app, e-book, banking service", "pack": "Goods are placed on the market packaged", "comm": "Wood, coffee, cocoa, soy, palm oil, rubber, cattle", "listed": "Securities admitted to a regulated market", "empDe": "decisive for the LkSG" }, "rechtsformen": { "ug": "UG (limited liability)", "gmbh": "GmbH", "ag": "AG or SE", "kg": "GmbH & Co. KG", "pers": "Partnership or sole trader" }, "branchen": { "energie": "Energy supply", "verkehr": "Transport and logistics", "bank": "Banking", "finanzmarkt": "Financial market infrastructure", "gesundheit": "Health", "wasser": "Drinking water and waste water", "digiinfra": "Digital infrastructure", "ikt": "ICT service management", "weltraum": "Space", "post": "Postal and courier services", "abfall": "Waste management", "chemie": "Chemicals", "lebensmittel": "Food", "industrie": "Manufacturing", "digidienst": "Digital providers", "forschung": "Research", "handel": "Retail and e-commerce", "bau": "Construction and real estate", "beratung": "Consulting and services", "medien": "Media and culture", "sonstige": "Other" }, "gruppen": { "Anlage 1 — hohe Kritikalität": "Annex 1 — high criticality", "Anlage 2 — sonstige kritische Sektoren": "Annex 2 — other critical sectors", "Nicht vom BSIG erfasst": "Not covered by the BSIG" }, "kiStufen": { "none": "None", "use": "General", "hr": "High-risk" }, "profile": { "startup": { "label": "Startup", "sub": "young software company" }, "shop": { "label": "Online retailer", "sub": "distance selling with packaging" }, "mittelstand": { "label": "Mid-sized", "sub": "industry with a supply chain" }, "versorger": { "label": "Utility", "sub": "operator of critical assets" }, "konzern": { "label": "Group", "sub": "listed industrial group" } }, "regelwerke": { "verpackg": { "name": "Packaging Act (VerpackG)", "schwelle": "No threshold", "kurz": "Anyone placing packaged goods on the German market must register before the first shipment. Company size is irrelevant.", "pflicht": "Registration in the LUCID packaging register before first placing on the market, participation in a dual system for packaging that reaches the end consumer, and an annual data report to the Central Agency.", "sanktion": "up to EUR 200,000 and a ban on distribution", "ohne": "only where goods are placed on the market packaged", "kriterien": ["Packaged goods in Germany"], "aufgaben": [ "Register in the LUCID packaging register before the first placing on the market, listing every brand name.", "Conclude a participation agreement with a dual system for packaging subject to system participation.", "Report the same volumes to the dual system and to the Central Agency.", "File the year-end report on the volumes actually placed on the market.", "Lodge a completeness declaration by 15 May of the following year once 80,000 kg of glass, 50,000 kg of paper or 30,000 kg of lightweight packaging is exceeded." ], "varianten": [{ "einstufung": null, "hinweis": null, "stufen": ["Registration duty for all packaging types"] }] }, "hinsch": { "name": "Whistleblower Protection Act (HinSchG)", "schwelle": "from 50 employees", "kurz": "An internal reporting channel with fixed response times, confidentiality and protection against retaliation.", "pflicht": "Set up and operate an internal reporting office, acknowledge receipt within seven days, give feedback within three months and protect the identity of the reporting person.", "sanktion": "up to EUR 50,000", "ohne": null, "kriterien": ["50 employees or more"], "aufgaben": [ "Set up an internal reporting office staffed by an independent and competent person.", "Provide channels for oral and written reports and allow a personal meeting on request.", "Acknowledge receipt of a report within seven days.", "Give feedback on the follow-up measures taken within three months of the acknowledgement.", "Keep the reporting person's identity confidential and prevent retaliation.", "Document reports and delete the documentation three years after the case is closed." ], "varianten": [{ "einstufung": null, "hinweis": null, "stufen": ["Duty applies from 50 employees"] }] }, "bfsg": { "name": "Accessibility Strengthening Act (BFSG)", "schwelle": "exemption below 10 employees", "kurz": "Consumer-facing digital products and services have to be accessible, with a published accessibility statement.", "pflicht": "Consumer-facing digital offerings must be accessible, with an accessibility statement, a feedback channel and conformity information.", "sanktion": "up to EUR 100,000 and a ban on distribution", "ohne": "only where there is a digital consumer offering", "kriterien": ["Digital consumer offering", "No micro-enterprise exemption"], "aufgaben": [ "Bring consumer-facing digital offerings in line with the BFSGV; the benchmark is the harmonised standard EN 301 549 with WCAG 2.1 level AA.", "Publish an accessibility statement covering conformity and known limitations.", "Set up a feedback mechanism through which barriers can be reported.", "Provide terms and conditions, product information and support in accessible form.", "Remedy defects identified by the market surveillance authority within the deadline set." ], "varianten": [{ "einstufung": null, "hinweis": null, "stufen": ["Date of application"] }] }, "nis2": { "name": "NIS2 Implementation Act (NIS2UmsuCG, BSIG)", "schwelle": "from 50 employees in a covered sector", "kurz": "Cybersecurity risk management, registration with the BSI and a three-step incident reporting chain.", "pflicht": "Risk management under section 30 BSIG, registration with the BSI, a reporting chain at 24 hours, 72 hours and one month, training and personal liability of the management body under section 38 BSIG.", "sanktion": "up to EUR 10 million or 2 % of global turnover", "ohne": "only in the sectors of Annexes 1 and 2", "kriterien": ["Sector under Annex 1 or 2", "Size criterion"], "aufgaben": [ "Register with the BSI within three months of meeting the criteria for a covered entity.", "Implement the risk management measures of section 30 BSIG: risk analysis, incident handling, business continuity, supply chain security, cryptography, access control and multi-factor authentication.", "Keep to the reporting chain: early warning within 24 hours, incident notification within 72 hours, final report at the latest one month after the notification.", "The management body oversees implementation, attends training regularly and is personally liable under section 38 BSIG.", "Produce evidence of implementation on request by the BSI." ], "varianten": [ { "einstufung": "Essential entity", "hinweis": "Essential entities are supervised proactively by the BSI, important entities only for cause.", "stufen": ["Entry into force of the NIS2UmsuCG", "End of the registration period with the BSI"] }, { "einstufung": "Important entity", "hinweis": "Important entities are supervised for cause; the duties under section 30 BSIG are identical.", "stufen": ["Entry into force of the NIS2UmsuCG", "End of the registration period with the BSI"] } ] }, "aiact": { "name": "AI Act", "schwelle": "no size threshold", "kurz": "Duties follow the risk class of the system, not the size of the company, and arrive in three waves.", "pflicht": "Prohibited practices and AI literacy already apply. Transparency duties for chatbots and synthetic content follow, high-risk duties for recruitment and credit scoring come last.", "sanktion": "up to EUR 35 million or 7 % of global turnover", "ohne": "only where AI is used or offered", "kriterien": ["AI systems in use", "High-risk under Annex III"], "aufgaben": [ "Ensure AI literacy among staff working with AI, Article 4 of the AI Act, applicable since 2 February 2025.", "Rule out the prohibited practices of Article 5, such as emotion recognition at the workplace and subliminal manipulation.", "Inventory the AI systems in use and classify them under the risk categories of the regulation.", "Meet the transparency duties of Article 50: disclosure for chatbots, machine-readable marking of synthetic content and notice for deepfakes.", "For high-risk systems under Annex III: risk management system, data governance, technical documentation, logging, human oversight, conformity assessment and registration in the EU database." ], "varianten": [ { "einstufung": null, "hinweis": "The Digital Omnibus deferred the Annex III high-risk duties to 2 December 2027.", "stufen": ["Prohibited practices and AI literacy", "Transparency duties under Article 50", "High-risk duties, Annex III"] }, { "einstufung": null, "hinweis": "Without high-risk systems only the prohibitions, AI literacy and the transparency duties apply.", "stufen": ["Prohibited practices and AI literacy", "Transparency duties under Article 50"] } ] }, "eudr": { "name": "Deforestation Regulation (EUDR)", "schwelle": "commodities under Annex I", "kurz": "A due diligence statement with geolocation for seven commodities and the products derived from them.", "pflicht": "Due diligence statement through the EU information system before placing on the market, geolocation of the plots of production, risk assessment and an annual review.", "sanktion": "up to 4 % of EU annual turnover", "ohne": "only for the seven commodities of Annex I", "kriterien": ["Commodities under Annex I", "Size class"], "aufgaben": [ "Identify commodities and products under Annex I in your own product range.", "Collect information along the supply chain: geolocation of the plots of production, time of production and supplier details.", "Carry out a risk assessment and, where the risk is not negligible, take risk mitigation measures.", "Submit the due diligence statement in the EU information system before placing on the market or exporting, and pass the reference number down the chain.", "Review the due diligence system annually; keep records and statements for five years." ], "varianten": [ { "einstufung": "Micro or small enterprise", "hinweis": "Micro and small enterprises file a simplified statement; geolocation may be replaced by the postal address.", "stufen": ["Date of application for micro and small enterprises"] }, { "einstufung": "Large operator", "hinweis": "Postponed by twelve months through Regulation (EU) 2025/2650 of 23 December 2025.", "stufen": ["Date of application for large operators"] } ] }, "lksg": { "name": "Supply Chain Due Diligence Act (LkSG)", "schwelle": "from 1,000 employees in Germany", "kurz": "Human rights due diligence in the company's own operations and at direct suppliers, documented rather than reported.", "pflicht": "Risk analysis, preventive and remedial measures, a complaints procedure and internal documentation kept for seven years. The annual reporting duty has been dropped.", "sanktion": "up to EUR 8 million or 2 % of global turnover", "ohne": null, "kriterien": ["1,000 employees or more in Germany"], "aufgaben": [ "Adopt and publish a policy statement on the human rights strategy.", "Assign responsibility, for example by appointing a human rights officer, and anchor it in the management body.", "Carry out a risk analysis in the company's own operations and at direct suppliers, annually and for cause.", "Embed preventive measures and take remedial action where violations are identified.", "Set up a complaints procedure, publish the rules of procedure and review its effectiveness annually.", "Document compliance on an ongoing basis and keep the documentation for seven years." ], "varianten": [{ "einstufung": null, "hinweis": "Sections 10(2) to (4) LkSG, the reporting duty, were repealed retroactively to 1 January 2023; the due diligence duties remain.", "stufen": ["Date of application from 1,000 employees"] }] }, "csrd": { "name": "Sustainability reporting (CSRD)", "schwelle": "over 1,000 employees and EUR 450 million", "kurz": "A sustainability statement inside the management report, prepared under the ESRS and externally assured.", "pflicht": "Sustainability statement within the management report under the ESRS, with a double materiality assessment, value chain disclosures and external assurance.", "sanktion": "national implementation pending", "ohne": null, "kriterien": ["Limited liability legal form", "More than 1,000 employees", "Turnover above EUR 450 million", "Listed on a regulated market"], "aufgaben": [ "Carry out a double materiality assessment and document the approach so it can be followed.", "Set up data collection for the ESRS datapoints in the company and across the value chain.", "Prepare the sustainability statement as a separate section of the management report.", "Tag the report in the single electronic reporting format and publish it.", "Commission external assurance at the limited assurance level." ], "varianten": [ { "einstufung": "Listed, already in scope", "hinweis": "Companies already reporting under the first wave stay in scope.", "stufen": ["Reporting duty for large listed companies"] }, { "einstufung": null, "hinweis": "Omnibus I raised the threshold; the German implementing act was still pending at the stated legal cut-off date.", "stufen": ["First reporting year", "First report"] } ] }, "csddd": { "name": "Corporate Sustainability Due Diligence Directive (CSDDD)", "schwelle": "over 5,000 employees and EUR 1.5 billion", "kurz": "Risk-based due diligence along the chain of activities, plus a climate transition plan.", "pflicht": "Risk-based due diligence along the chain of activities, remediation where adverse impacts are identified, and a climate transition plan aligned with the Paris Agreement.", "sanktion": "at least 5 % of global net turnover", "ohne": null, "kriterien": ["More than 5,000 employees", "Turnover above EUR 1.5 billion"], "aufgaben": [ "Embed due diligence in company policy and in the risk management system.", "Identify and assess actual and potential adverse impacts along the chain of activities.", "Prevent, mitigate or bring adverse impacts to an end and provide remediation where required.", "Set up a complaints procedure and a notification mechanism for affected parties.", "Align a climate transition plan with the 1.5 degree target of the Paris Agreement and put it into effect.", "Review the effectiveness of the measures at regular intervals." ], "varianten": [{ "einstufung": null, "hinweis": "Omnibus I raised the threshold from 1,000 employees and EUR 450 million and postponed application by one year.", "stufen": ["Transposition into national law", "Application to companies in scope"] }] } } }