Article
EU Cyber Regulation, Part II: The Soon-To-Be-Updated Cybersecurity Act Is Linked To Geopolitics
CSA2 obliges companies to map their supply chains more thoroughly than before. The European Commission’s new proposal for a Cybersecurity Act was published in January 2026. The original regulation, which entered into force in 2019, focused on the certification framework and the tasks of the EU Agency for Cybersecurity, ENISA. The newly published CSA2 proposal significantly expands this framework.
Hannes Snellman Attorneys Ltd