Cybersecurity Act 2
European Union Agency for Cybersecurity (ENISA), the European cybersecurity certification framework, and ICT supply chain security and repealing Regulation (EU) 2019/881 (The Cybersecurity Act 2)
- Stage
- Commission proposal, reached 21 Jan 2026
- Procedure
- Regulation · Ordinary legislative procedure
- Rapporteur
- Markéta Gregorová (Greens/EFA)
- Lead DG
- DG CNECT
- Commissioner
- Henna Virkkunen
- Council configuration
- Transport, Telecommunications and Energy Council
- Last activity
- 7 Sept 2026
- Legal basis
- TFEU Art. 114; TFEU Art. 294
Where it stands
Latest: Deliberations in Council working party, 7 Sept 2026.
ShowHide the earlier record: 23 dates, 21 Jan 2026 to 22 Jun 2026
- 21 Jan 2026
- Adoption of legislative proposal by the Commission
- 2 Feb 2026
- Deliberations in Council working party
- 9 Feb 2026
- Deliberations in Council working party
- 23 Feb 2026
- Deliberations in Council working party · Council
- 26 Feb 2026
- Appointment of rapporteur
- 2 Mar 2026
- Deliberations in Council working party · Council
- 9 Mar 2026
- Deliberations in Council working party · Council
- 16 Mar 2026
- Deliberations in Council working party · Council
- 25 Mar 2026
- Referral of the legislative proposal to the EP committee responsible (announced in plenary) · Parliament
- Referred to committee
- 30 Mar 2026
- Deliberations in Council working party · Council
- 20 Apr 2026
- Deliberations in Council working party · Council
- 27 Apr 2026
- Deliberations in Council working party
- 4 May 2026
- Deliberations in Council working party · Council
- 11 May 2026
- Deliberations in Council working party · Council
- 18 May 2026
- Deliberations in Council working party · Council
- 21 May 2026
- Deliberations in Council working party
- 28 May 2026
- Deliberations in Council working party
- 1 Jun 2026
- Deliberations in Council working party
- 3 Jun 2026
- Deliberations in Coreper
- 4 Jun 2026
- Deliberations in Council working party
- 9 Jun 2026
- Deliberations in Council · Council
- 11 Jun 2026
- Deliberations in Council working party · Council
- 22 Jun 2026
- Deliberations in Council working party
- 25 Jun 2026
- Deliberations in Council working party · Council
- 29 Jun 2026
- Deliberations in Council working party · Council
- 2 Jul 2026
- Deliberations in Council working party · Council
- 6 Jul 2026
- Deliberations in Council working party · Council
- 9 Jul 2026
- Deliberations in Council working party · Council
- 13 Jul 2026
- Deliberations in Council working party · Council
- 16 Jul 2026
- Deliberations in Council working party · Council
- 7 Sept 2026
- Deliberations in Council working party · Council
Who is on it
The Parliament's rapporteurs, shadow rapporteurs and opinion rapporteurs currently on this file.
| Role | Name | Group | Country | Committee |
|---|---|---|---|---|
| Rapporteur | Markéta Gregorová | Greens/EFA | CZ | ITRE |
| Shadow rapporteur | Aleksandar Nikolic | PfE | FR | ITRE |
| Shadow rapporteur | Bart Groothuis | Renew | NL | ITRE |
| Shadow rapporteur | Diego Solier | ECR | ES | ITRE |
| Shadow rapporteur | Jens Geier | S&D | DE | ITRE |
| Shadow rapporteur | Marc Botenga | The Left | BE | ITRE |
| Shadow rapporteur | Markus Buchheit | ESN | DE | ITRE |
| Shadow rapporteur | Tomas Tobé | EPP | SE | ITRE |
| Rapporteur for opinion | Hélder Sousa Silva | EPP | PT | BUDG |
| Rapporteur for opinion | Maria Guzenina | S&D | FI | IMCO |
| Shadow rapporteur for opinion | Dimitris Tsiodras | EPP | EL | |
| Shadow rapporteur for opinion | Morten Løkkegaard | Renew | DK | |
| Shadow rapporteur for opinion | Reinis Pozņaks | ECR | LV |
Documents
Newest first. Each opens at its source.
- Proposal · COM(2026)0011Commission · 20 Jan 2026
Summary
GeneratedThe Cybersecurity Act 2 repeals Regulation (EU) 2019/881 to modernize the EU cybersecurity framework. It expands ENISA's mandate, establishes a robust certification framework, and strengthens ICT supply chain security. The proposal affects institutions, technology providers, and critical infrastructure operators.
What the workspace adds on this file
Everything above is the public record. Subscribers see this page with their own layer on top.
Why it matters to you
What moved
Your contacts on it
A first draft
Sources: EP Legislative Observatory · EU Law Tracker. Record as of 14 Sept 2026. Something wrong on this page? Report an error.
Request access
See this file with your own layer on top: why it matters to you, your contacts on it and a first draft. We’ll schedule a 20-minute walkthrough.
EU-hosted · GDPR-compliant · Trust Center →
By submitting, you agree to our privacy policy.