Skip to main content
Shaping Europe’s digital future
  • POLICY AND LEGISLATION
  • Publication 20 January 2026

Proposal for a Regulation for the EU Cybersecurity Act

The Commission has proposed a new cybersecurity package to further strengthen the EU's cybersecurity resilience and capabilities.

Hands stacked together in a symbol of teamwork, surrounded by icons representing cybersecurity, communication, and data.

GettyImages © Blue Planet Studio

The Proposal for a revised Cybersecurity Act is part of this package. It aims to increase cybersecurity capabilities and resilience and prevent fragmentation across the EU digital single market. It also enhances the security of the EU's Information and Communication Technologies (ICT) supply chains. It ensures that products reaching EU citizens are cyber-secure by design through a simpler certification process. It also facilitates compliance with existing EU cybersecurity rules and reinforces the EU Agency for Cybersecurity (ENISA) in supporting Member States and the EU in managing cybersecurity threats.

You can download the Proposal and the annexes below.

Downloads

1. COM(2026) 11 - Proposal for a Regulation for the EU Cybersecurity Act
Download 
2. COM(2026) 11 - Annexes to the Proposal for a Regulation for the EU Cybersecurity Act
Download 
3. Impact Assessment - Proposal for a Regulation for the EU Cybersecurity Act
Download 
4. Summary of the Impact Assessment - Proposal for a Regulation for the EU Cybersecurity Act
Download 

Related content