EU cyber law draft would hand member states power to designate risky countries
By Júlia Tar and Matthew Newman ( September 29, 2026, 13:13 GMT | Insight) -- Designation of non-EU countries as posing cybersecurity concerns to critical EU technology supply chains would be decided by member-state governments, rather than the European Commission, under a draft text for the revision of the Cybersecurity Act dated Sept. 22. The text would require an assessment of a designation’s likely effects and give national officials more time to assess supply-chain risks.EU member states would have the final say on designating non-EU countries as posing cybersecurity concerns to critical technology supply chains under a draft revision of the Cybersecurity Act dated Sept. 22....
Prepare for tomorrow’s regulatory change, today
MLex identifies risk to business wherever it emerges, with specialist reporters across the globe providing exclusive news and deep-dive analysis on the proposals, probes, enforcement actions and rulings that matter to your organization and clients, now and in the longer term.
Know what others in the room don’t, with features including:
- Daily newsletters for Antitrust, M&A, Trade, Data Privacy & Security, Technology, AI and more
- Custom alerts on specific filters including geographies, industries, topics and companies to suit your practice needs
- Predictive analysis from expert journalists across North America, the UK and Europe, Latin America and Asia-Pacific
- Curated case files bringing together news, analysis and source documents in a single timeline
Experience MLex today with a 14-day free trial.