Cybersecurity Act 2 (revision of the Cybersecurity Act)
Proposed regulation that would replace the 2019 Cybersecurity Act, strengthening ENISA, simplifying the EU cybersecurity certification framework, and adding measures to reduce ICT supply chain risks from high-risk third-country suppliers.
Where it stands
ProposedIntroducedCommitteeFloorLawProposedITRE committee draft report published (PE792.222)Sep 189 days ago
Timeline
Sep 18 9 days ago
Apr 29 5 months ago
Mar 25 6 months ago
Referral to ITRE committee announced in plenary, 1st reading
Feb 26 7 months ago
Jan 20 8 months ago
Commission proposal COM(2026) 11 published, procedure 2026/0011(COD)