One of the tasks of the supervisory NCCA is the handling of complaints according to Regulation (EU) 2019/881 (Cybersecurity Act, in short: CSA). Article 63 of the CSA lays down that natural and legal persons have the right to lodge a complaint with the issuers of European cybersecurity certificates.

Complaints about certification procedures under the CSA can be sent informally by post to:

Bundesamt für Sicherheit in der Informationstechnik
Abteilung S
postbox 20 03 63
53133 Bonn

Alternatively, there is the possibility to send complaints to the following e-mail address:

complaint.ncca@bsi.bund.de

For encrypted communication, please use the S/MIME-certificate.

duration of validity:
26.02.2025 to 27.02.2028
Fingerprint:
‎37 62 BA 19 89 C6 86 36 C7 60 D6 2C FB 13 F1 47 22 9B 89 FE

If the complaint is justified after examination, appropriate measures will be taken. The complainants will be informed.

If the supervising NCCA concludes after the examination that the complaint is unjustified, the complainants will also be informed.