By Edith Hancock
The European Commission presented a plan to phase out member states' use of equipment from what it deems high-risk suppliers as part of a revamp of the bloc's cybersecurity rules.
"Cybersecurity threats are not just technical challenges. They are strategic risks to our democracy, economy, and way of life," Henna Virkkunnen, the European Union's top tech enforcer, said in a statement Tuesday. "With the new Cybersecurity Package, we will have the means in place to better protect our critical ICT supply chains but also to combat cyber attacks decisively," she said.
Under the plans, the commission will establish lists of companies it deems are high-risk suppliers. The rules will target 18 sectors such as automated vehicles, electricity supply systems, cloud computing and medical devices, according to a draft proposal unveiled by the EU executive on Tuesday. Mobile network operators, for example, would have 36 months to phase out their use of components provided by high-risk suppliers, it said.
The proposal still needs approval from EU member states and the European Parliament before it can come into effect.
Write to Edith Hancock at edith.hancock@wsj.com
(END) Dow Jones Newswires
January 20, 2026 12:37 ET (17:37 GMT)
Copyright (c) 2026 Dow Jones & Company, Inc.
Comments