Proposed EU mandatory measures to restrict high-risk suppliers would ensure a "level playing field"
24 February 26
Javier Huerta Bravo
A representative of the European Commission told the European Parliament that the draft Cybersecurity Act 2 (CSA2) would avoid that a security vulnerability in one EU country spreads to others. The draft CSA2 contains a framework to restrict high-risk ICT suppliers in EU critical sectors, including telecoms.
EU Digital & Media Weekly Report
22 February 26
Javier Huerta Bravo
This report gathers policy and regulatory developments at EU level covered by Cullen International’s Digital Economy and Media services during the last week. It also lists events taking place this week.
EU toolbox extends 5G security concerns associated with high-risk suppliers to the ICT supply chain
19 February 26
Visiola Pula
The information and communications technology (ICT) supply chain security toolbox (non-binding) recommends EU member states restrict the use of high-risk suppliers (HRS) in priority sectors. HRS restrictions are also extended to ICT components and hardware used in connected and automated vehicles through an EU coordinated risk assessment that analyses cybersecurity risks affecting these systems and their supply chain. While the recommended measures in the toolbox and risk assessment are voluntary, similar obligations are included in the proposal for a revised Cybersecurity Act (CSA2) which would be legally binding.
Digital Omnibus: European data protection authorities against new personal data definition
18 February 26
Elisar Bashir
In a joint opinion, the European Data Protection Board (EDPB) and the European Data Protection Supervisor (EDPS) highlighted concerns about the proposed amendments to the definition of personal data and the Commission’s power to clarify when pseudonymised data no longer constitutes personal data.
Cable security toolbox encourages prioritising EU-based suppliers
16 February 26
Alessandra Vaes
Key measures in the non-binding cable security toolbox include implementing robust physical and cybersecurity measures, as well as reducing exposure to non-EU suppliers. Similar binding requirements for operators of submarine cable infrastructure and member states could also apply under the targeted amendments to the Directive on measures for a high common level of cybersecurity across the EU (NIS2) and the draft Cybersecurity Act 2 (CSA2).
EU Digital & Media Weekly Report
15 February 26
Miljana Todorovic
This report gathers policy and regulatory developments at EU level covered by Cullen International’s Digital Economy and Media services during the last week. It also lists events taking place this week.