Cybersecurity Act
Proposal for a REGULATION OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL on ENISA, the "EU Cybersecurity Agency", and repealing Regulation (EU) 526/2013, and on Information and Communication Technology cybersecurity certification (''Cybersecurity Act'')
- Stage
- In force
- In force
- In force since 27 Jun 2019 · CELEX 32019R0881
- Procedure
- Regulation
- Last activity
- 17 Apr 2019
Delegated and implementing acts beneath it
By status: 5 published.
| Act | Kind | Status | Adoption |
|---|---|---|---|
| Commission Implementing Regulation (EU) 2025/2540 | Implementing · Regulation | Published | Q4 2025 |
| Commission Implementing Regulation (EU) 2025/2462 | Implementing · Regulation | Published | Q3 2025 |
| Commission Implementing Regulation (EU) 2024/3143 | Implementing · Regulation | Published | 25/09/2024 |
| Commission Implementing Regulation (EU) 2024/3144 | Implementing · Regulation | Published | 25/09/2024 |
| Commission Implementing Regulation (EU) 2024/482 | Implementing · Regulation | Published | Q2 2022 |
Titles link to EUR-Lex where the act has been published.
Summary
GeneratedRegulation (EU) 2019/881 establishes ENISA's permanent mandate and a framework for voluntary European cybersecurity certification schemes covering ICT products, services, processes, and managed security services. Certification is voluntary unless EU or Member State law makes it mandatory; the Commission assesses schemes for possible mandatory status.
What the workspace adds on this file
Everything above is the public record. Subscribers see this page with their own layer on top.
Why it matters to you
What moved
Your contacts on it
A first draft
Sources: EUR-Lex. Record as of 14 Sept 2026. Something wrong on this page? Report an error.
Request access
See this file with your own layer on top: why it matters to you, your contacts on it and a first draft. We’ll schedule a 20-minute walkthrough.
EU-hosted · GDPR-compliant · Trust Center →
By submitting, you agree to our privacy policy.