The Horizontal Working Party on Cyber Issues of the Council of the European Union is scheduled to meet on 13 July 2026 to discuss the Presidency compromise text on the Cybersecurity Act 2, focusing on Title III concerning the European Cybersecurity Certification Framework. The meeting, set for 10:00 in the Justus Lipsius Building in Brussels, will address Articles 71-97 of the proposed regulation that would repeal and replace the current Cybersecurity Act (Regulation (EU) 2019/881). The agenda item covers the certification framework, which is a key component of the EU's efforts to enhance cybersecurity for ICT products, services, and processes.
The meeting follows the publication of the Presidency compromise text (WK 7571/26) and is part of the ongoing legislative process to update the EU's cybersecurity framework. The proposed regulation aims to strengthen the role of ENISA, the EU Agency for Cybersecurity, and introduce new rules on ICT supply chain security. The certification framework under discussion is expected to establish common cybersecurity certification schemes across member states, reducing fragmentation and boosting trust in digital products.
Stakeholders impacted include EU member states, which will need to implement the new certification requirements; ICT manufacturers and service providers, who may face new compliance costs but also benefit from harmonized standards; and consumers, who could gain greater assurance of product security. The meeting is a technical working-level discussion, and no formal decision is expected; instead, it will feed into further negotiations before the proposal reaches the Council's Coreper and eventually the Council for adoption. The European Parliament is also expected to weigh in on the file as part of the ordinary legislative procedure.