Within the scope of the cross-sector review regime, the reportable facts (so-called regulartory examples) will be increased from 11 to 27. A large number of so-called emerging technologies are thus subject to the reporting obligation. In doing so, the German legislator partly concretises the terminology of the EU Screening Regulation, either by referring to specific German or EU laws such as the Satellite Data Security Act or certain item numbers of Regulation 428/2009 ("Dual-Use-Regulation"). This approach is to be welcomed as it leads to a much clearer delimitation of the relevant activities than the EU rules. Other countries have adopted the terminology of the EU regulation one-to-one. Nevertheless, some of the new German reporting requirements are also unclear. The draft bill contains the following additional reporting requirements:
- High-quality Earth remote sensing systems (from the Satellite Data Security Act);
- artificial intelligence that could be misused;
- autonomous motor vehicles or unmanned aircrafts (incl. drones) and essential com-ponents or software;
- industrial robots, including software, technology or specific IT services;
- certain semiconductors such as integrated circuits on a substrate and discrete semi-conductors as well as optoelectronics;
- IT products and components for the protection of IT systems, the defence against cyber attacks and IT technology for the investigation of criminal offences and the preservation of evidence by law enforcement agencies;
- air carriers within the meaning of Regulation (EC) No 1008/2008 and aerospace companies that develop or manufacture certain dual-use goods or goods or technol-ogies intended for aerospace use or for use in space infrastructure systems;
- nuclear technology;
- quantum technology;
- additive manufacturing (3D printing);
- network technologies, especially in the area of 5G networks;
- smart meter gateways and security modules for them;
- important services for the Federal Republic of Germany in the field of information and communication technology, e.g. in the field of digital radio;
- raw material producers, processors and refiners as detailed on the EU list of critical raw materials;
- goods that are legally protected as secret patents and
- food security, i.e. enterprises that directly or indirectly manage an agricultural area of more than 10,000 hectares.
The "sharpening" of some existing regulatory examples is to be welcomed. Thus, the legisla-tor clarifies with regard to "cloud computing services" (Section 55a (1) no. 4 AWV) that the server capacities used for the respective cloud computing service and not the total capacity of the server infrastructure used (e.g. Amazon Web Services), which may for the most part have no relation to the cloud computing service, are decisive for reach-ing the threshold value. The old version of the regulatory example had led to considera-ble legal uncertainty in cases where the target company offers services via "software as a service".