Calendar 2026: AI, Digitalization & Cybersecurity

All important deadlines and dates for freelancers, small businesses and SMEs at a glance. From EU AI Act to NIS2 to funding programs.

Regulation Funding Important Deadline

Q1 2026 January – March

January 6

BSI Portal for NIS2 Reporting Launches

The official BSI reporting portal goes live. Companies can register and report security incidents.

NIS2 From 50 employees / €10M revenue
BSI Info →
March 6

Deadline: NIS2 Registration with BSI

Affected companies must register with BSI by this date. No transition period!

NIS2 ~29,500 companies affected
Warning: Fines up to €10M for violations. Managing directors are personally liable.
What to do? →

Q2 2026 April – June

June

BMWK "Digital Technologies Development" – Final Application Phase

Funding for AI, cybersecurity, blockchain and 5G/6G projects. SMEs receive up to 50% cost reimbursement plus SME bonus.

Funding SMEs preferred
Learn more →

Q3 2026 July – September

August 2

EU AI Act: Full Application for High-Risk AI

High-risk AI systems (HR selection, credit scoring, medical diagnostics, educational assessment) must meet all requirements.

EU AI Act All AI providers & users
Timeline →
August 2

EU AI Act: AI Sandboxes in All Member States

Each EU state must establish at least one regulatory sandbox. Startups and SMEs can test AI solutions under supervision.

EU AI Act Startups, SMEs
Details →
September 11

Cyber Resilience Act: Vulnerability Reporting Obligation

Manufacturers of products with digital elements must report actively exploited vulnerabilities to ENISA and BSI within 24 hours.

CRA IoT/Software manufacturers
Applies to legacy products: All products still on the market, regardless of release year.
Fraunhofer Info →
September 12

Data Act: "Access by Design" for New Products

All new connected products and services must be designed so that usage data is directly and automatically available.

Data Act IoT manufacturers, connected devices
SME exemption: Micro and small enterprises are exempt from many obligations.
DIHK Info →

Q4 2026 October – December

December 31

BAFA SME Consulting Funding Ends

Last chance for 50–80% subsidy (max. €2,800) for external consulting on digitalization, AI, organization or sustainability.

Funding All SMEs
Tip: Max. 2 consultations per year, 5 total in the funding period.
BAFA Funding →
December 31

Mittelstand-Digital Program Ends

Free digitalization support through Mittelstand-Digital centers expires.

Funding All SMEs
Digital Center Berlin →

Outlook 2027

Jan 12, 2027

Data Act: No Cloud Switching Fees

Cloud providers may no longer charge switching fees.

Aug 2, 2027

EU AI Act: Applies to ALL

Legacy systems (pre-Aug 2025) must also be compliant.

Sep 12, 2027

Data Act: Legacy Contracts

Fairness rules apply to older B2B contracts too.

Dec 11, 2027

CRA: Full Application

All products with digital elements must be CRA-compliant.

Ongoing Funding Programs 2026

BAFA Business Consulting

50–80% Subsidy

External consulting on digitalization, AI, organization. Max. €2,800 per project phase.

Target: SMEs Until: Dec 31, 2026

KfW Digitalization Loan

Up to €25M

Loans for digital technologies, AI, cloud, IT security. 70% liability exemption for small businesses.

Target: SMEs up to €500M revenue Ongoing

Mittelstand-Digital

Free

Free consulting, workshops and digitalization support through regional centers.

Target: All SMEs Until: Dec 31, 2026

Unsure if your company is affected?

The AI Check Report analyzes your AI usage and shows which regulations are relevant to you.

To AI Check →