Penalty fines are foreseen and contained in the BSI Act. They are not comparable to those of the GDPR, but more comparable with those from the KRITIS Regulation.

A breach of various obligations for UBI (see “Which legal obligations will apply to UBI?”) is subject to a penalty fine. Penalty fines of up to 500,000 Euros may apply

1. in case of failure to register or late registration (§ 14 para. 2 no. 5 BSI Act)
2. in case of failure to designate or late designation of a contact point (§ 14 para. 2 no. 5 BSI Act)
3. If the self-declaration according to § 8f para. 1 BSI Act not submitted, not submitted correctly or completely, or is submitted late (§ 14 para. 2 no. 9 BSI Act)
4. if a report is not submitted, not submitted correctly or completely, or is submitted late to the BSI (§ 14 para. 2 no. 7 BSI Act).