European UnionEuropean UnionProposalCOM(2026) 11
Cybersecurity Act 2 (revision of the Cybersecurity Act)
Proposed regulation that would replace the 2019 Cybersecurity Act, strengthening ENISA, simplifying the EU cybersecurity certification framework, and adding measures to reduce ICT supply chain risks from high-risk third-country suppliers.
ITRE committee draft report published (PE792.222)Sep 18 7 weeks ago
- Body
- European Commission
- Session
- 10th parliamentary term
- Introduced
- Jan 20
Timeline
Sep 18 7 weeks ago
Apr 29 6 months ago
Mar 25 7 months ago
Referral to ITRE committee announced in plenary, 1st reading
Feb 26 8 months ago
Jan 20 9 months ago
Commission proposal COM(2026) 11 published, procedure 2026/0011(COD)
Related
Digital Legislation Overhaul Package
The Council of the European Union agreed on its negotiating position regarding updates to data protection, cookie, data sharing, and incident reporting rules.
Cyber Resilience Act
Sets mandatory cybersecurity requirements for hardware and software products with digital elements sold in the EU, including vulnerability handling and incident reporting duties for manufacturers.
Digital Omnibus (data, GDPR, ePrivacy, NIS2 simplification)
Proposed regulation that amends the GDPR, the ePrivacy Directive, NIS2 and the Data Act to simplify EU rules on cookie consent, incident reporting and data sharing, and folds several data laws, including the Data Governance Act, into the Data Act.
NIS2 Directive
Sets cybersecurity risk management and incident reporting obligations for medium and large entities in critical sectors and requires member states to supervise and enforce them.
Action Plan on Cybersecurity and Artificial Intelligence
Commission action plan to promote safe use of advanced AI, including pre-market evaluation capacity for AI models under the AI Act, strengthen EU cyber resilience, and scale up AI capabilities for cybersecurity.
Digital Networks Act
Proposed regulation that would merge the European Electronic Communications Code, the BEREC Regulation and the radio spectrum programme into one telecoms law, with a single passport for operators, longer spectrum licences and national plans to phase out copper networks.
Gigabit Infrastructure Act
Replaces the Broadband Cost Reduction Directive with rules to cut the cost and speed up the rollout of gigabit networks, covering permits, access to physical infrastructure and fibre-ready buildings.
Cyber Solidarity Act
Sets up a European Cybersecurity Alert System of cross-border Cyber Hubs, a Cybersecurity Emergency Mechanism with an EU Cybersecurity Reserve, and a review mechanism for significant incidents.
Change log
- AddedAdded to the list. Set by hand from the official record.Sep 27
Summaries of public legislative records, executive actions and court rulings, for reference, not legal advice. Check the official page linked on each item. First seen 2026-09-27. Checked against the official source.