EU targets high-risk suppliers, Huawei objects

EU proposes to restrict components from high-risk suppliers in critical sectors, a move that has drawn criticism from Huawei.

The draft revision to the EU’s Cybersecurity Act aims to strengthen supply chain security over cybersecurity and foreign interference risks.

Huawei stated that the proposal could violate principles of fairness and non-discrimination, citing concerns over country-based restrictions.

The new rules target 18 sectors, including connected vehicles, energy, water systems, drones, cloud services, and semiconductors.

Implementation will depend on risk assessments by the EU or at least three member states, based on market analysis.

🔗 Source: Reuters

🧠 Food for thought

Implications, context, and why it matters.

The legal and technical tests for labeling a supplier as “high-risk” are still unclear.
The proposal is meant to cover 18 sectors, from cloud services to semiconductors, yet the exact “components and equipment” inside those categories have not been spelled out.
The schedule for finishing the “formal risk assessment” and releasing the high-risk supplier list has not been set. That list would trigger a 36-month phase-out period for mobile network operators.

Mobile operators, utilities, and other firms in the 18 designated sectors, plus their investors, may see buying shift toward suppliers based in Europe if replacements are required.
Companies working in semiconductors, drones, or cloud services can prepare products and capacity to meet demand created when customers are required to switch vendors.
Cloud providers can pitch their platforms as a fit with the EU push for “technological sovereignty,” which may appeal to enterprise and public-sector buyers looking to cut reliance on non-EU suppliers before any rules take effect.