Austria's new cybersecurity law to take effect on Thursday

Austria's New Cybersecurity Law To Take Effect On Thursday

Austria's Network and Information Systems Security Act 2026 (NISG 2026) will come into force on Thursday, introducing mandatory cybersecurity standards for approximately 4,000 companies and institutions.

The law implements the EU's NIS2 Directive and establishes binding risk-management measures and reporting obligations. The new Federal Office for Cybersecurity (BCS) will also commence operations on 1 October as Austria’s central cybersecurity authority.

"Our goal is to sustainably strengthen Austria and its economy, as well as their resilience to cyberattacks." - Markus Roth, Chairman of the Information and Consulting Division at the Austrian Federal Economic Chamber (WKÖ).

Key Points:

• NISG 2026 makes cybersecurity a core element of responsible corporate governance in Austria.
• The law affects around 4,000 companies and institutions.
• A new Federal Office for Cybersecurity (BCS) will be established.