20
January
2026
Commission proposes revised Cybersecurity Act targeting telecom network security
On January 20, 2026, the European Commission proposed a revised Cybersecurity Act (“CSA 2.0”) that would expand the European Union’s authority to regulate cybersecurity risks in telecommunications networks and digital infrastructure. The proposal would repeal and replace Regulation (EU) 2019/881 and authorize EU institutions to designate certain suppliers of network equipment, software, and related technology services as posing cybersecurity risks.
If adopted, CSA 2.0 would require telecommunications operators and other network providers operating in EU Member States to restrict or phase out designated suppliers from critical components of their electronic communications networks and to implement risk mitigation measures required by EU authorities. The proposal would also authorize fines calculated as a percentage of an operator’s total worldwide annual turnover for non-compliance. The proposal remains under consideration in the European Parliament and the Council of the European Union.
Last updated: 01/20/2026.
European Union (Regulatory)
History:
- Jan 20, 2026: European Commission adopts the proposed revision to the Cybersecurity Act and transmits it to Parliament and Council for legislative consideration. Proposal for a Regulation for the EU Cybersecurity Act.