European Union: Cybersecurity regulation in Proposal for a Regulation on the European Union Agency for Cybersecurity (ENISA), the European cybersecurity certification framework, and ICT supply chain security (The Cybersecurity Act 2)
Progress
Current status
under deliberation
18 Mar 2026 under deliberation
20 Jan 2026 under deliberation
Scope
Implementers
Austria
Belgium
Bulgaria
Croatia
Cyprus
Czechia
Denmark
Estonia
Finland
France
Germany
Greece
Hungary
Ireland
Italy
Latvia
Lithuania
Luxembourg
Malta
Netherlands
Poland
Portugal
Romania
Slovakia
Slovenia
Spain
Sweden
Policy Area
Data governance
Policy Instrument
Cybersecurity regulation
Regulated Economic Activity
cross-cutting
Government Branch
executive
Government Body
central government
Implementation Level
supranational
Timeline of events
European Data Protection Board and European Data Protection Supervisor adopted joint opinion on Cybersecurity Act 2
On 18 March 2026, the European Data Protection Board (EDPB) and the European Data Protection Supervisor (EDPS) adopted a joint opinion on the Proposal for a Regulation of the European Parliament and of the Council on the European Union Agency for Cy…
SourceEvent type
law
Action type
opinion
Government branch
executive
Government body
central government
European Commission submitted Proposal for a Regulation on the European Union Agency for Cybersecurity (ENISA), the European cybersecurity certification framework, and ICT supply chain security (The Cybersecurity Act 2) including cybersecurity regulation
On 20 January 2026, the European Commission submitted the Proposal for a Regulation of the European Parliament and of the Council on the European Union Agency for Cybersecurity (ENISA), the European cybersecurity certification framework, and ICT sup…
SourceEvent type
law
Action type
introduction
Government branch
executive
Government body
central government