Written question – Risks linked to hidden communication modules in solar inverters – E-002219/2025

Question for written answer  E-002219/2025
to the Commission
Rule 144
Beatrice Timgren (ECR)

A recent investigation has revealed that solar inverters manufactured by Chinese companies and deployed across Western markets may contain communication modules capable of transmitting data without the knowledge of the user[1]. These hidden modules, thus far only discovered in models exported to US markets, raise serious cybersecurity and sovereignty concerns. Such devices are reportedly installed in the products without being listed in the product documentation. This could potentially enable remote shutdowns and data exfiltration.

Given the above:

• 1.Is the Commission aware of these findings, and has it initiated an investigation into the security implications of Chinese-made inverters installed within the EU?
• 2.What steps is the Commission taking to assess and mitigate risks to energy infrastructure from Chinese-controlled hardware and software?
• 3.Will the Commission consider adjusting existing EU security standards or certification procedures to ensure that solar inverters and related components are subject to checks for hidden communication capabilities?

Submitted: 3.6.2025

• [1] Reuters, ‘Rogue communication devices found in Chinese solar power inverters’, 14 May 2025, https://www.reuters.com/sustainability/climate-energy/ghost-machine-rogue-communication-devices-found-chinese-inverters-2025-05-14.