On 20 January 2026, the EU Commission proposed a new package of cyber security measures.
The package includes a proposal to revise the Cyber Security Act, to enhance the security of the EU ICT supply chains and to introduce a simpler cyber security certification process for consumer products. The package further introduces measures which aim to simplify compliance with EU cyber security rules and risk management requirements for companies operating in the EU and bolster the role of the European Union Agency for Cyber Security – ENISA.
You can find details of the package here.