European Union Drafts Revised Cybersecurity Act Targeting Foreign Suppliers

The European Union unveiled a draft revision to its Cybersecurity Act that would mandate the gradual phase-out of “high-risk” technology and components from certain non-EU providers - notably firms linked to Chinese supply chains. The draft, still subject to parliamentary approval, aims to cut dependence on equipment and software whose security assurances are considered opaque or potentially compromised. The policy focuses on critical infrastructure sectors such as telecoms networks, cloud services, medical devices, and industrial automation. Officials argue that while open markets are valuable, geopolitical cyber risks have become too acute to ignore, and building EU technology sovereignty is essential for robust national and regional defense. Security researchers and R&D teams are closely watching this proposal, as it could reshape procurement standards and stimulate investment in homegrown secure technologies, trusted hardware roots, and independent protocol validation frameworks.

20-01-2026