European UnionEuropean UnionLawRegulation (EU) 2025/38

Cyber Solidarity Act

Sets up a European Cybersecurity Alert System of cross-border Cyber Hubs, a Cybersecurity Emergency Mechanism with an EU Cybersecurity Reserve, and a review mechanism for significant incidents.

Body

European Parliament and Council

Session

10th parliamentary term

Introduced

Apr 18, 2023

In effect since

Feb 4, 20251y1 year ago

Topics

Cyber

Related

European Union

European Unionunverified

Digital Legislation Overhaul Package

The Council of the European Union agreed on its negotiating position regarding updates to data protection, cookie, data sharing, and incident reporting rules.

Passed one chamberOct 23

European Union

European UnionCOM(2026) 11

Cybersecurity Act 2 (revision of the Cybersecurity Act)

Proposed regulation that would replace the 2019 Cybersecurity Act, strengthening ENISA, simplifying the EU cybersecurity certification framework, and adding measures to reduce ICT supply chain risks from high-risk third-country suppliers.

ProposedSep 18

European Union

European UnionRegulation (EU) 2024/2847

Cyber Resilience Act

Sets mandatory cybersecurity requirements for hardware and software products with digital elements sold in the EU, including vulnerability handling and incident reporting duties for manufacturers.

In forceSep 11

European Union

European UnionCOM(2025) 837

Digital Omnibus (data, GDPR, ePrivacy, NIS2 simplification)

Proposed regulation that amends the GDPR, the ePrivacy Directive, NIS2 and the Data Act to simplify EU rules on cookie consent, incident reporting and data sharing, and folds several data laws, including the Data Governance Act, into the Data Act.

ProposedJul 27

European Union

European UnionDirective (EU) 2022/2555

NIS2 Directive

Sets cybersecurity risk management and incident reporting obligations for medium and large entities in critical sectors and requires member states to supervise and enforce them.

In forceJul 8

European Union

European UnionCOM(2026) 577

Action Plan on Cybersecurity and Artificial Intelligence

Commission action plan to promote safe use of advanced AI, including pre-market evaluation capacity for AI models under the AI Act, strengthen EU cyber resilience, and scale up AI capabilities for cybersecurity.

AdoptedJul 7

European Union

European UnionDirective (EU) 2024/2853

Product Liability Directive

Replaces the 1985 product liability rules and extends no-fault liability for defective products to software, including AI systems, digital manufacturing files and related digital services.

In forceDec 8, 2024

European Union

European UnionCommission Implementing Regulation (EU) 2024/2690

NIS2 Implementing Regulation on technical requirements and significant incidents

Sets the technical and methodological cybersecurity risk management requirements under NIS2 for digital infrastructure and digital service providers, such as cloud, data centre and managed security providers, and defines when their incidents count as significant.

In forceNov 7, 2024

Summaries of public legislative records, executive actions and court rulings, for reference, not legal advice. Check the official page linked on each item. First seen 2026-09-27. Checked against the official source.