European Union Agency for Cybersecurity (ENISA), the European cybersecurity certification framework, and ICT supply chain security and repealing Regulation (EU) 2019/881 (The Cybersecurity Act 2)
A proposed EU law. Parliament and the Council must agree on the same text: Parliament adopts its position, then negotiates with the Council.
Where it stands: In committee: ITRE (Industry, Research and Energy) is preparing the report (draft published 18 September 2026).
- ✓ Referred to committee 25 March 2026
- 2 Committee work ITRE (Industry, Research and Energy) preparing the report
- 3 Tabled for plenary
- 4 Plenary vote
- 5 Negotiations with the Council
- 6 Published as law
How a file moves through Parliament
A file is referred to one lead committee (others may give an opinion). Its rapporteur writes a draft report, committee members table amendments, and the committee votes to adopt the report. The report is then tabled for all MEPs; political groups can table further amendments, which are voted on before the final vote in plenary. For a law, Parliament’s adopted text is its first-reading position; Parliament and the Council then negotiate a common text (trilogues) which both must approve before it is published as law.
Who is working on it
- Lead committee
- ITRE — Industry, Research and Energy
- Rapporteur
- Markéta GREGOROVÁ Verts/ALE
- Shadow rapporteurs
- Tomas TOBÉ PPEJens GEIER S&DAleksandar NIKOLIC PfEDiego SOLIER ECRBart GROOTHUIS RenewMarc BOTENGA The LeftMarkus BUCHHEIT ESN
- For opinion
- IMCO — Internal Market and Consumer Protection · rapporteur Maria GUZENINA S&D
The rapporteur drafts and negotiates the text for the lead committee; each other political group names a shadow rapporteur to follow the file.
The text, version by version
Committee opinions: Draft opinion (BUDG)
Newest version first. Open a version to read it in full. “What changed” shows the differences paragraph by paragraph; ✦ lines are AI-written from the texts themselves.
Timeline
- Committee stage
- 13 October 2026 Amendments tabled in committee (4 batches)
Members of ITRE (Industry, Research and Energy) proposed changes to the draft.
- 18 September 2026 Draft report published
The rapporteur’s first text in ITRE (Industry, Research and Energy). Members can table amendments before the committee votes.
- 25 March 2026 Referred to the ITRE (Industry, Research and Energy) committee
The lead committee prepares the report; IMCO (Internal Market and Consumer Protection) gives an opinion.