Legal framework
Modern EU legislation sets clear requirements for information security. Click on the info boxes for details and legal sources.
The transposition of the NIS2 Directive in the Austrian NISG 2026 (in force since 1 October 2026) obliges affected companies to take effective risk management measures. Securing e-mail communication is an established measure recommended by specialist authorities.
Security standards & governanceFor serious breaches of NIS2 due diligence obligations, the statutory provisions set fines depending on classification of up to €7 million or 1.4 % (important entities) and up to €10 million or 2 % of worldwide annual turnover (essential entities).
Regulatory requirementsActive review by competent authorities and auditors. Technical and organisational security measures (TOMs) must be fully documented.
Audit & documentation obligationsThe content, analyses and audit reports provided on this website serve exclusively as general information about technical security standards (such as SPF, DKIM, DMARC) and related regulatory frameworks (including NIS2 and the GDPR). They expressly do not constitute legal, tax or official compliance advice and cannot replace individual advice from qualified lawyers or specialised experts. Although prepared with care, we accept no liability for the accuracy, completeness or timeliness of the regulatory information presented. Liability is excluded to the extent permitted by law; this does not apply in cases of intent or gross negligence or to personal injury. The operators of linked external websites are solely responsible for their content; no legal violations were apparent at the time of linking.