European Sovereignty Monitor

Policy and law

Commission proposes Cybersecurity Act revision with 5G high-risk supplier phase-out

The Commission proposed a Cybersecurity Act revision and NIS2 amendment on 20 January 2026, requiring high-risk suppliers to be phased out of 5G networks within three years and raising ENISA's budget by more than 75%.

Verified AI-drafted European Commission press release, 20 January 2026

What it does not test. This does not establish that any member state has excluded a named supplier such as Huawei or ZTE, since the phase-out is a proposal awaiting Parliament and Council agreement.

How this item counts. Towards autonomy: it changes who made the parts. Binding 1 of 3 (announced), scale 3 of 3 (large), Verified counts in full: weight +3 of 36 possible. Proposed EU-wide phase-out of high-risk 5G suppliers in 3 yrs; parts, not yet agreed. European Sovereignty Index

How this item was made. Drafted by an AI system (Claude (Anthropic)) from the source cited above and published under the editor’s responsibility without a person reading it first. How the record is made

What the tags mean: VerifiedReportedAI-draftedAI-drafted, editor-readHuman-writtenWhat the tags mean

Previously in Policy and law

VerifiedOpinionAI-drafted DIGITALEUROPE's Bonefeld-Dahl: sovereignty rules need high fences only for sensitive fields ReportedOpinionAbroadAI-drafted FFO says Ofcom cannot enforce Online Safety Act fines on US websites VerifiedAI-drafted EU-backed OSOR report finds national open source policy now a sovereignty tool

All Policy and law news →