Germany Introduces KRITIS-Dach Law for Enhanced Physical Security in Data Centers Against UAV Threats
The KRITIS-Dach law, enacted on January 29, 2026, sets minimum security standards for critical infrastructures in Germany, including data centers. The law responds to rising threats, particularly from unmanned aerial vehicles (UAVs), which have caused security alarms at various sites, including airports and energy facilities.
In light of these vulnerabilities, operators are enhancing physical security measures that extend into airspace protection. The law allows military and police to use force against illegal UAVs over critical infrastructures.
It mandates risk analysis, incident reporting, and responsibilities for company leadership. Additionally, the law aligns with broader EU cybersecurity initiatives. A multi-layered defense strategy is recommended, emphasizing AI for security tasks and physical design improvements to reduce stress in high-security environments.
