From 20 to 50: Germany Relaxes Safety Officer Rules but Piles on New Cyber and Physical Security Mandates

German companies navigating occupational safety law are facing a paradox: just as one bureaucratic burden eases, several others are tightening. The threshold for appointing mandatory safety officers has been raised, but new cybersecurity, physical protection, and product-reporting deadlines demand immediate attention from employers and their compliance teams.

Keeping risk assessments current can be a compliance challenge. A free toolkit offers 41 ready-to-use templates covering fire safety, manual handling, lone working and more, helping you meet your obligations efficiently. Download the free Risk Assessment Toolkit

Higher threshold, narrower trigger

The centrepiece of the reform is a change to § 22 of the Social Code (SGB VII). The minimum number of employees requiring a company to designate at least one safety officer jumped from 20 to 50. The Bundestag passed the measure on 26 March, and it took effect on 29 May 2026. Firms with 20 to 49 staff now only need to appoint a safety officer if a specific workplace hazard exists. The employer still carries overall responsibility for occupational safety.

Experts advise employers to refresh their risk assessments regularly—and to systematically include psychological stress alongside physical dangers. The safety officer’s role remains advisory and supportive; it does not replace the company’s safety specialist or management.

New qualifications and tools from July

Alongside the legal shift, accident insurance providers are expanding their offerings. The Berufsgenossenschaft Rohstoffe und chemische Industrie (BG RCI) will roll out specialised advanced training at its Laubach and Maikammer centres from July.

Technical aids have also been updated. A new respiratory protection guide helps firms calculate service life and export data. Revised leaflets cover combustible dusts, concrete mixers, and blasting operations—the last from the German Social Accident Insurance (DGUV).

Beyond workplace safety: NIS?2 and CER

Safety officers now operate in a far broader regulatory landscape. Germany’s NIS?2 Implementation Act has been in force since 6 December 2025. It imposes new instruction duties in sectors such as energy, chemicals, and machinery—not only for employees but explicitly for management on risk management and incident response.

Physical security is another layer. Under the EU’s CER Directive (2022/2557), organisations running critical infrastructure must be identified by 17 July 2026. Germany’s KRITIS umbrella act governs this area, with the Federal Office for Civil Protection and Disaster Assistance (BBK) supervising. For safety officers in sensitive roles, background checks may become more relevant.

As regulatory demands expand beyond workplace safety, a comprehensive Health & Safety Toolkit can help you stay on top of documentation. It includes risk assessments and checklists aligned with major UK regulations, used by over 37,000 businesses. Get the free Health & Safety Toolkit

Cyber Resilience Act tightens reporting

Connected-product manufacturers face additional deadlines from 11 September 2026. The Cyber Resilience Act (CRA) introduces mandatory reporting for actively exploited vulnerabilities. Reaction times are extremely short: an early warning must be sent within 24 hours, a detailed report within 72 hours.

Training providers are responding. The DEKRA Akademie has stepped up initial courses covering basics, fire protection, and psychological stress—available both in-person and online. Demand for qualified personnel is growing as the compliance landscape becomes increasingly complex.

en | boerse | 69762765 |