The Broader Context: Reducing Dependence on Risky Suppliers
The CSA2 proposal aligns with broader EU efforts to reduce strategic dependencies in critical sectors. In recent policy discussions, the European Commission has made clear its intention to tighten rules for suppliers involved in telecommunications, energy systems, transport networks, healthcare technologies, and other critical infrastructures.
These discussions often focus on Chinese technology suppliers, particularly in the context of 5G and future digital networks. Although Cybersecurity Act 2 remains country-neutral in its legal wording, it provides the tools needed to operationalize supplier restrictions across the entire digital ecosystem, not just in telecommunications.
In this sense, the new Cybersecurity Act marks a shift from voluntary risk mitigation guidelines toward binding, enforceable measures at EU level.
Digital Networks Act: Completing the Picture
Alongside CSA2, the European Commission has proposed the Digital Networks Act, which aims to modernize and harmonize the regulatory framework for electronic communications across the EU.
Key objectives of the Digital Networks Act include:
creating a more integrated single market for telecom and network services,
facilitating cross-border investments in 5G and future 6G networks,
simplifying spectrum management and licensing procedures,
- encouraging the deployment of secure, high-performance digital infrastructure.
Together, Cybersecurity Act 2 and the Digital Networks Act reflect a comprehensive EU approach: security, connectivity, and competitiveness are treated as interdependent priorities.
