EU Cybersecurity Act Amendments Proposed
New legislative proposals introduce AI oversight and supply-chain risk assessments for solar hardware.
Updated on Oct. 13, 2026 in Cybersecurity
Live Poll
Should the EU require mandatory cybersecurity certification for businesses to ensure better digital safety?
Swedish lawmaker Tomas Tobé has introduced amendments to the European Parliament's Cybersecurity Act revision. The proposals keep certification voluntary while adding mandates for AI-related tasks and supply-chain security.
Why it matters
The amendments signal a shift toward integrating specialized risk assessments for emerging technologies into existing EU security frameworks. By targeting AI and solar equipment, the proposal highlights shifting priorities for regional infrastructure resilience.
The proposal mandates priority supply-chain risk assessments for solar equipment and tasks the EU cybersecurity agency with new AI responsibilities. These requirements extend existing voluntary certification frameworks to address specific technology-driven vulnerabilities.
The players
Tomas Tobé
A Swedish lawmaker coordinating the European People's Party position on the EU Cybersecurity Act.
The details
The amendments introduce formal security oversight for solar hardware supply chains and specific tasks for the EU's cybersecurity agency concerning artificial intelligence. By retaining a voluntary approach to certification, the framework aims to balance security standards with market accessibility for non-EU vendors. These checks on risk from non-EU countries remain a core component of the proposed legislative updates.
Timeline
October 6, 2026: The amendments were proposed by Tomas Tobé.
October 13, 2026: Date of initial reporting on the legislative updates.
The Tech Race
These amendments represent an effort to modernize the EU Cybersecurity Act to address contemporary hardware and software risks. The proposals build on the existing regulatory foundation while specifically addressing supply-chain security for renewable energy hardware.
The inclusion of solar equipment in supply-chain risk assessments could eventually influence certification requirements for hardware manufacturers and installers. Compliance timelines and the full extent of AI oversight remain subject to ongoing negotiations in the European Parliament.
The takeaway
The move underscores a growing European emphasis on securing specialized infrastructure components against non-EU risks. Readers should track upcoming sessions in the European Parliament to see how these provisions for AI and solar supply chains evolve before final adoption.
Further reading
For broader context on current regional security policies, see our Cybersecurity section.
Source note: This article includes information reported by Mlex.
Live Poll
Should the EU require mandatory cybersecurity certification for businesses to ensure better digital safety?
