NIS2Compass — NIS2-Compliance-Plattform
Use CasesPricing
Go to platform

Explore

  • Blog
  • FAQ
  • Glossary
  • Use Cases
  • Sectors
  • Pricing

Official Sources

  • BSI – Bundesamt für Sicherheit in der Informationstechnik
  • NIS2-Richtlinie (EUR-Lex)
  • NIS2UmsuCG (Bundesgesetzblatt)
NIS2Compass — NIS2-Compliance-Plattform

Your Navigator Through NIS2 Compliance

Legal

  • Privacy Policy
  • Terms of Service
  • Cookie Policy
  • Imprint

Resources

  • Blog
  • Use Cases
  • Industries
  • NIS2 affectedness check
  • NIS2 templates
  • Pricing
  • FAQ
  • Glossary

Connect

Contact

kontakt@nis2compass.de

NIS2Compass bietet Informationen und Orientierungshilfen zur NIS2-Compliance. Die Inhalte stellen keine Rechtsberatung im Sinne des Rechtsdienstleistungsgesetzes (RDG) dar und ersetzen keine individuelle rechtliche oder fachliche Beratung.

© Copyright 2026 NIS2Compass. All Rights Reserved.

Made in GermanyAllianz für Cyber-Sicherheit — Teilnehmer

NIS2 Fine Calculator

Estimate the potential fine for NIS2 violations — anonymous, no data storage, based on §65 BSIG.

Your inputs

Anonymous calculation. This application stores no inputs. The calculation runs entirely in your browser. All values are cleared when you close or refresh the page.

Estimated fine range

Please fill in all required fields to see an estimate.

Frequently asked questions

How high can NIS2 fines be?
Up to EUR 10 million or 2 % of global annual turnover for essential entities; up to EUR 7 million or 1.4 % for important entities (§65 BSIG). The higher value applies.
Who sets the fine?
The German Federal Office for Information Security (BSI). Courts may review and reduce the amount in appeal proceedings — as the 2025 Notebooksbilliger ruling demonstrated.
Are my inputs stored?
No. The calculation runs entirely in your browser; no data is transmitted to any server, and no inputs are persisted.
How binding is the estimate?
The estimate is a non-binding approximation. Actual fines are set on a case-by-case basis and may differ significantly.
Why GDPR comparison cases?
No NIS2 fines have been imposed in Germany yet. GDPR supervisory practice is largely transferable in methodology and assessment criteria.
Can management be held personally liable?
Yes. §38 BSIG requires management to approve, supervise and personally train on risk management measures. Violations can result in recourse claims.

More background on NIS2 fines

What consequences actually apply? Full breakdown under §65 BSIG including personal §38 liability, operational bans and comparison with GDPR fines.

Read: NIS2 Fines, Liability & Consequences→

What does it cost to avoid the fine risk? An overview of the implementation effort:

Read: NIS2 compliance costs at a glance→

No legal advice. This application does not replace legal or specialist advice in individual cases.