NISG 2026 scope check: six questions

For businesses in Vienna and Austria: assess the scope, identify open questions and plan your next steps.

NISG 2026: are you in scope?

Six questions. A preliminary result, relevant dates and practical next steps. Free, without email or company documents.

Legal research checked on 21 October 2026. Sources and limits

0 / 6 answered

Does Austrian jurisdiction apply to this entity?

For ordinary businesses: establishment in Austria. Digital providers have special main-establishment rules; telecom depends on services in Austria (§ 28). A Vienna customer alone is insufficient.

Does the actual activity match an entity type in Annex 1 or 2?

Annex 1 includes energy, transport, banking, financial infrastructure, health, water, digital infrastructure, B2B ICT management, public administration and space. Annex 2 includes postal/courier, waste, chemicals, food, selected manufacturing, digital platforms and research. Check the exact entity type, not just the industry name.

Which legal size category applies?

Large: at least 250 staff OR turnover > €50m AND balance sheet > €43m. Medium: at least 50 staff OR turnover > €10m AND balance sheet > €10m, unless already large. Use annual work units and the applicable accounting periods under § 25 and the EU SME rules. The financial tests require BOTH conditions.

Have partner and linked enterprises been accounted for?

Group figures may need to be added, including foreign entities. The § 25(4) independence exception needs organisational, technical AND operational independence of the relevant systems; a separate legal entity alone does not establish this.

Is there a size-independent service or official classification?

Choose the strongest applicable ground. DNS means supplying DNS services to others, not simply owning a domain. A domain registrar/reseller is a separate category. Possible criticality requires review, not an automatic administrative designation.

Does a sector-specific regime or supply-chain situation apply?

DORA is not a blanket registration exemption. Public administration and exclusions under § 24(6) need a tailored assessment. A customer questionnaire alone does not make the supplier a directly regulated entity.