As NIS-2 Deadline Nears, German Chemical Firms Turn to Automated Safety Reports

Germany's chemical industry braces for NIS-2 cybersecurity rules as firms pilot automated reporting tools and prepare for overlapping EHS, PFAS, and packaging regulations.

Germany’s chemical sector faces a fresh compliance crunch as the NIS-2 cybersecurity directive, approved by both the Bundestag and Bundesrat in November 2025, is set to take effect in early 2026. Companies affected must register with the Federal Office for Information Security (BSI) and implement comprehensive risk-management measures. The law explicitly covers the chemical industry, adding a layer of digital security obligations on top of existing workplace-safety rules.

To handle the growing complexity, many firms are now piloting automated reporting tools. A beta version of the European Chemicals Agency’s Chesar software helps produce Chemical Safety Assessments (CSAs) and their accompanying reports (CSRs). These documents can run more than 45 pages each and can be integrated into systems such as SAP REACh Compliance or IUCLID. The goal is to systematically map exposure scenarios and build a solid foundation for worker protection.

Advertisement

Keeping your own risk assessments up to date across multiple regulatory demands can quickly become overwhelming. A free toolkit with 41 ready?to?use templates and checklists helps you systematically document workplace hazards and stay compliant without the paperwork burden. Download the free Risk Assessment Toolkit

Later this week, a specialist event is scheduled to examine the latest developments in EHS Risk Assessment (Environment, Health, and Safety) within the SAP S/4HANA Public Cloud. Organisers say the focus will be on automated approval workflows for chemicals and Job Hazard Analyses. By using workplace analytics, companies hope to identify hazards more precisely and derive safety instructions directly from data streams.

Beyond cybersecurity, other regulatory changes are converging. A new guidance document on PFAS contamination was released in June, covering compliance with legal requirements for testing and sample preparation — critical for determining pollutant levels in industrial settings. Meanwhile, the EU Packaging and Packaging Waste Regulation (PPWR) is set for discussions in mid-June, with particular implications for the medical-technology sector.

Authorities are also scaling up oversight capacity. At the start of June, Berlin’s State Office for Occupational Safety, Health and Technical Safety (LAGetSi) advertised the position of head of its Department of Operational Occupational Safety I. Filling such posts signals the growing importance of professionally grounded supervision in a tightening regulatory environment.

Research, too, is contributing new approaches. In Bavaria, a startup has teamed up with the Augsburg University of Applied Sciences to develop AI-driven quality-assurance systems tailored for small and medium-sized enterprises. The partnership aims to further automate the monitoring of production processes and exposure risks, potentially easing compliance for firms that lack large in-house safety teams.