European Sovereignty Monitor

Policy and law

EU aviation cybersecurity rule Part-IS becomes binding across airlines

Commission Implementing Regulation (EU) 2023/203, EASA's Part-IS, became applicable across the EU to airlines, maintenance organisations, training bodies and air navigation providers, requiring a formal information security management system for aviation safety risks.

Verified AI-drafted EUR-Lex, Commission Implementing Regulation (EU) 2023/203, consolidated text applicable from 22 February 2026

What it does not test. Does not certify that any individual organisation has actually met the new requirement.

How this item counts. Towards autonomy: it changes whose law governs. Binding 3 of 3 (in force or operating), scale 3 of 3 (large), Verified counts in full: weight +9 of 36 possible. EU cybersecurity rule now in force EU-wide across airlines and ANSPs. European Sovereignty Index

How this item was made. Drafted by an AI system (Claude (Anthropic)) from the source cited above and published under the editor’s responsibility without a person reading it first. How the record is made

What the tags mean: VerifiedReportedAI-draftedAI-drafted, editor-readHuman-writtenWhat the tags mean

Previously in Policy and law

VerifiedOpinionAI-drafted DIGITALEUROPE's Bonefeld-Dahl: sovereignty rules need high fences only for sensitive fields ReportedOpinionAbroadAI-drafted FFO says Ofcom cannot enforce Online Safety Act fines on US websites VerifiedAI-drafted EU-backed OSOR report finds national open source policy now a sovereignty tool

All Policy and law news →