Two-Minute Recap: IT Law Matters Around The Globe - 2026 January

EU Puts Forward New Cybersecurity Package

On January 20, 2026, the European Commission (the "Commission") introduced a new cybersecurity initiative to strengthen the EU's resilience and capabilities in response to growing threats. The initiative includes a proposal for an updated Cybersecurity Act to improve the security of the EU's information and communication technology ("ICT") supply chains. It ensures that products supplied to EU citizens are designed with cybersecurity in mind through a more straightforward certification process.

The revised Cybersecurity Act will ensure that products and services available to EU consumers undergo security testing more effectively. This will be achieved through an enhanced European Cybersecurity Certification Framework ("ECCF"). The ECCF will provide greater clarity and simpler processes, enabling certification schemes to be created within a default timeframe of 12 months. It will also implement more flexible and