From Care to Cybersecurity: Germany’s Summer 2026 Rule Overhaul Targets Businesses and Individuals

Germany enacts six laws by mid-2026: childless pay more for nursing care, welfare sanctions tighten, anti-discrimination deadlines extend, and transport fuel quotas rise steeply.

A cascade of six new laws takes effect across Germany between now and mid-2026, imposing fresh obligations on companies and changing social benefits for millions. The combined package stretches from climate quotas for transport fuel to tighter cybersecurity rules covering 30,000 firms, higher nursing-care contributions for childless workers, and stricter sanctions for jobless benefit recipients.

Nursing care: childless workers pay more, home-care relief delayed

The long-term care insurance fund faces a projected deficit of €7.6 billion in 2027. In response, the health ministry presented a reform package in early June that aims to cover a total financing gap of €11.2 billion. Starting 1 January 2027, the supplementary contribution for childless individuals will rise from 0.6 to 0.7 percentage points, bringing their overall contribution rate to 4.3 percent. The contribution assessment ceiling will be aligned with that of statutory health insurance.

On the benefit side, the planned 15-percent reduction in residents’ co-payments for nursing-home care will only apply after 18 months of stay, stretching the relief timeline. From 2028, benefits are scheduled to be adjusted annually in line with inflation.

Basic income support: sharper penalties and a new minijob option

In July 2026, the current welfare system is replaced by a new Grundsicherungsgeld. Sanctions become more severe: a first failure to meet obligations can trigger a 30-percent cut to the standard benefit for three months. Total refusal to work may result in a complete loss of payments for at least one month.

At the same time, minijob holders gain the right to cancel a previous exemption from compulsory pension insurance. That reversal allows them to build up mandatory contribution periods, qualify for rehabilitation services, and access occupational pension schemes. The employer’s contribution remains unchanged.

Anti-discrimination law: longer deadlines and wider reach

The cabinet approved amendments to the General Equal Treatment Act (AGG) in May 2026. The deadline for claiming compensation is extended from two to four months. Gender-discrimination protections are now expanded to all private legal transactions — including contracts with gyms and driving schools.

Separately, the government is modernising design law. A draft bill released in early June (Drucksache 21/6215) extends protection to animated designs and 3D-printed objects. Measures against product piracy during goods transit are strengthened. A repair clause for spare parts will apply until December 2032.

Climate targets: transport sector faces steep quotas and fines

The federal government has tightened the greenhouse-gas reduction quota for transport under a law published in the Federal Law Gazette (BGBl. I No. 163) in early June, transposing the EU’s RED III directive. The quota rises stepwise: 12 percent in 2026, 17.5 percent in 2027, 26.5 percent by 2030 and 65 percent by 2040. Non-compliance with sub-quotas for renewable fuels of non-biological origin (RFNBO) carries a penalty of €120 per gigajoule. Palm oil is excluded entirely, and rules for biomethane have been revised.

NIS-2: cybersecurity obligations expand from 4,500 to 30,000 organisations

The transposition of the EU’s NIS-2 directive dramatically widens cybersecurity requirements. Previously covering roughly 4,500 entities, the law will apply to more than 30,000 organisations from mid-2026. Any entity with at least 50 employees or annual revenue exceeding €10 million in regulated sectors — including energy, transport and manufacturing — is now subject to the rules.

The financial burden is substantial: one-time implementation costs of €2.2 billion, plus recurring annual expenses of around €2.3 billion. New duties include registration with the Federal Office for Information Security (BSI), mandatory comprehensive risk management, and stricter incident-reporting obligations.