Source: European Parliament
The Commission is in the process of reviewing the Cybersecurity Act ( Regulation (EU) 2019/881[1]). To support this review and gather views of interested stakeholders, on 11 April 2025, the Commission opened a call for evidence and a public consultation, available on the Have Your Say portal[2],, both open until 20 June 2025. The Commission aims to publish an evaluation of the Cybersecurity Act, as well as an impact assessment and a proposal for a revised Cybersecurity Act, in 2025, as announced in the ProtectEU Strategy[3].
In the review process, the Commission is taking into account the current cybersecurity threats landscape. The Commission is assessing the need to amend the mandate of the European Union Agency for Cybersecurity (ENISA) and its role in the cybersecurity ecosystem, to ensure it is fit for purpose. The Commission is also assessing the European cybersecurity certification framework (ECCF) and considering the options that would contribute to a better integration of the EU cybersecurity market and improve efficiency of the ECCF, including addressing information and communications technology (ICT) supply chain security challenges . The Commission is also looking at simplification possibilities, in particular as regards reporting obligations.
Setting out and implementing a robust cybersecurity framework is imperative to ensure economic stability, cyber resilience and security of critical infrastructures. The Commission refers the Honourable Member to the 2024 State of the Digital Decade package[4] and the Seventh Progress Report on the implementation of the EU Security Union Strategy[5], which outline the progress in implementing cybersecurity policies in the internal market.
- [1] https://eur-lex.europa.eu/eli/reg/2019/881/oj/eng .
- [2] https://ec.europa.eu/info/law/better-regulation/have-your-say/initiatives/14578-The-EU-Cybersecurity-Act_en .
- [3] COM(2025)0148.
- [4] 2024 State of the Digital Decade package https://digital-strategy.ec.europa.eu/en/policies/2024-state-digital-decade-package .
- [5] COM(2024)0198.