EU Digital & Media Weekly Report
22 February 26
Javier Huerta Bravo
This report gathers policy and regulatory developments at EU level covered by Cullen International’s Digital Economy and Media services during the last week. It also lists events taking place this week.
EU toolbox extends 5G security concerns associated with high-risk suppliers to the ICT supply chain
19 February 26
Visiola Pula
The information and communications technology (ICT) supply chain security toolbox (non-binding) recommends EU member states restrict the use of high-risk suppliers (HRS) in priority sectors. HRS restrictions are also extended to ICT components and hardware used in connected and automated vehicles through an EU coordinated risk assessment that analyses cybersecurity risks affecting these systems and their supply chain. While the recommended measures in the toolbox and risk assessment are voluntary, similar obligations are included in the proposal for a revised Cybersecurity Act (CSA2) which would be legally binding.
Digital Omnibus: European data protection authorities against new personal data definition
18 February 26
Elisar Bashir
In a joint opinion, the European Data Protection Board (EDPB) and the European Data Protection Supervisor (EDPS) highlighted concerns about the proposed amendments to the definition of personal data and the Commission’s power to clarify when pseudonymised data no longer constitutes personal data.
Cable security toolbox encourages prioritising EU-based suppliers
16 February 26
Alessandra Vaes
Key measures in the non-binding cable security toolbox include implementing robust physical and cybersecurity measures, as well as reducing exposure to non-EU suppliers. Similar binding requirements for operators of submarine cable infrastructure and member states could also apply under the targeted amendments to the Directive on measures for a high common level of cybersecurity across the EU (NIS2) and the draft Cybersecurity Act 2 (CSA2).
EU Digital & Media Weekly Report
15 February 26
Miljana Todorovic
This report gathers policy and regulatory developments at EU level covered by Cullen International’s Digital Economy and Media services during the last week. It also lists events taking place this week.
European Data Protection Board decisions are challengeable, EU top court says
12 February 26
Javier Huerta Bravo
The EU Court of Justice overturned a first-instance decision declaring WhatsApp’s action against a decision of the European Data Protection Board inadmissible. It sent the case back to the EU General Court, which will now decide on the substance of the case. The case addressed the nature of “composite procedures”, i.e. those administrative procedures established by EU law where decisions are taken in multiple steps, involving both EU and national bodies.