Commission Seeks Input on Cybersecurity Act Review

The European Commission has launched a review of the 2019 Cybersecurity Act, aiming to enhance the EU’s resilience against increasing cyber threats. This initiative underscores the Commission’s dedication to simplifying regulatory frameworks while ensuring robust protection for digital infrastructure. The review will primarily examine the mandate of ENISA, the EU Agency for Cybersecurity, and the effectiveness of the European Cybersecurity Certification Framework.

A key focus of the revision is addressing challenges related to ICT supply chain security, which remains a critical concern amid evolving threat landscapes. The Commission also seeks to streamline cybersecurity rules, particularly by reducing reporting obligations that currently burden businesses and authorities. These changes are intended to facilitate smoother implementation and foster a more business-friendly regulatory environment.

Stakeholders across the EU—including national competent authorities, cybersecurity agencies, industry groups, academic researchers, consumer organizations, and individual citizens—are encouraged to participate in the consultation. Feedback can be provided via the Have Your Say portal and the EU Survey until 20 June.

This review represents a significant opportunity for the digital law community to influence future cybersecurity policy in the EU. By engaging with the consultation process, stakeholders can help shape a regulatory framework that balances security, efficiency, and economic growth.

Source: Commission opens consultation on revising EU Cybersecurity Act