Tobé Proposed EU Cybersecurity Act Amendments
Swedish lawmaker Tomas Tobé has introduced new amendments to the European Union's proposed Cybersecurity Act revision.
Updated on Oct. 13, 2026 in Cybersecurity
Live Poll
Should the EU require mandatory cybersecurity certification for businesses to ensure better digital safety?
Swedish lawmaker Tomas Tobé introduced amendments to the EU Cybersecurity Act on October 6, 2026. The proposals include new AI-related tasks for the European cybersecurity agency and supply-chain risk assessments for solar equipment.
Why it matters
The changes aim to solidify the European approach to digital infrastructure security. By maintaining voluntary certification and non-EU risk checks, the proposal balances market flexibility with national security concerns.
The amendments introduce new AI tasks for the EU cybersecurity agency and require priority supply-chain risk assessments for solar equipment. The regulation maintains cybersecurity certification as voluntary by default for entities within the European Union.
The players
Tomas Tobé
Tomas Tobé is a Swedish lawmaker who coordinates the European People's Party position on the Cybersecurity Act revision.
The details
The proposed changes retain oversight regarding risks originating from non-EU countries. The legislative package shifts responsibilities for the regional cybersecurity agency to better monitor emerging artificial intelligence threats.
Timeline
October 6, 2026: Tomas Tobé proposed the amendments.
October 13, 2026: Date of the report regarding the legislative updates.
The Tech Race
The proposal aligns with the broader push to secure critical European infrastructure against external digital threats. This move represents a strategic update to the EU Cybersecurity Act to address the evolving vulnerabilities found in modern AI and renewable energy supply chains.
The proposed regulations primarily affect companies operating in the AI and solar energy sectors by establishing new compliance and risk assessment standards. These measures may lead to stricter vetting processes for supply chains that currently integrate components from non-EU manufacturers.
The takeaway
Legislators are increasingly focusing on the intersection of physical infrastructure security and emerging digital technologies. Organizations should prepare for potential updates to supply-chain risk protocols as the European Parliament reviews these amendments.
Further reading
Learn more about the latest regulatory developments in Cybersecurity.
Source note: This article includes information reported by Mlex.
Live Poll
Should the EU require mandatory cybersecurity certification for businesses to ensure better digital safety?
