- BSI is introducing a new procedure allowing certified software to stay compliant after updates without recertification by certifying development processes under TR-03185.
- The focus shifts from recertifying each software version to ensuring secure and quality-assured development and change processes.
- Certification under TR-03185 is valid for three years, maintained by annual audits, and removes the need for re-certifications or update notifications.
- The pilot starts in February 2026 for health apps, with plans to expand to other guidelines; certification is optional but offers faster releases, less admin work, and demonstrates secure practices.
- More information will be available on the BSI website; inquiries can be sent to [email protected].
Source: fiscal-requirements.com
Note that this post was (partially) written with the help of AI. It is always useful to review the original source material, and where needed to obtain (local) advice from a specialist.
Latest Posts in "Germany"
- New VAT Rules for Deficit-Financed Public Facilities: Key Changes on Subsidies and Input Tax Deduction
- VAT Deduction for Deficit-Running Public Entities: New Rules Bring Legal Certainty for Municipalities
- Place of Supply for Warehouse Deliveries in Germany: BFH Decision on Customer Identification Timing
- Reduced VAT Rate for Restaurant and Catering Services in Germany Effective January 1, 2026
- Transitional Provisions After Repeal of German VAT Warehouse Regulation Effective January 1, 2026
