Cyber solidarity act [EU Legislation in Progress]

Written by Polona Car (3rd edition, updated on 10.07.2025).

Russia’s war against Ukraine has revealed the extent of our dependency on digital technology and the fragility of the digital space. It has triggered a surge in cyberattacks that have been particularly disruptive when targeting critical infrastructure – such as energy, health or finance – because of the increasing reliance on information technology, rendering this infrastructure all the more vulnerable.

Against this backdrop, the Commission has proposed a regulation on a cyber solidarity act that would address the urgent need to strengthen solidarity and EU capacities to detect, prepare for and respond to cybersecurity threats and incidents. The proposed regulation envisages the establishment of a framework based on three pillars. The first is a European cyber shield – a platform of national and cross-border security operations centres. The second is a cybersecurity emergency mechanism that would support – including financially – preparedness, response and mutual assistance actions among Member States by creating a European cybersecurity reserve of trusted providers. The third is a cybersecurity incident review mechanism to assess and review significant or large-scale incidents.

The Cyber Solidarity Act was published in the EU’s Official Journal on 15 January 2025. It entered into force on 4 February 2025 and became binding in its entirety and directly applicable in all Member States.

Complete version

• July 2025: ‘Cyber solidarity act‘ (3rd edition)