EU Cyber Solidarity Act
In force European Union · In force Feb 4, 2025 · next deadline Feb 5, 2027 (in 4 months)
Deadlines
| Date | What happens | When |
|---|---|---|
| Coming up | ||
| Feb 5, 2027in 4 months | First Commission evaluation | in 4 months |
| Earlier | ||
| Feb 4, 20251 year ago | Cyber Solidarity Act enters into force | 20 months ago |
Summaries for reference, not legal advice. Check the official text.
What it does
Sets up a European Cybersecurity Alert System of national and cross-border Cyber Hubs, a Cybersecurity Emergency Mechanism with an EU Cybersecurity Reserve of trusted private incident response providers, and a Cybersecurity Incident Review Mechanism for significant and large-scale incidents.
- Who it applies to
- Member States, national Cyber Hubs, ENISA, and entities in NIS2 critical sectors that may receive support from the Reserve; trusted managed security service providers.
- Penalties
- No direct fines; funding and cooperation instrument.
- Enforced by
- European Commission, ENISA and Member State authorities.
- Official name
- Regulation (EU) 2025/38 laying down measures to strengthen solidarity and capacities in the Union to detect, prepare for and respond to cyber threats and incidents (Cyber Solidarity Act)
- Citation
- Regulation (EU) 2025/38
- Topics
- cybersecurity
Verified 2026-09-25 publications.europa.eu
Research notes
Entry into force computed from OJ publication plus 20 days.
Related
Questions about EU Cyber Solidarity Act
- What are the EU Cyber Solidarity Act compliance deadlines?
- Feb 4, 2025: Cyber Solidarity Act enters into force. Feb 5, 2027: First Commission evaluation.
- When does EU Cyber Solidarity Act take effect?
- EU Cyber Solidarity Act took effect on Feb 4, 2025. The next milestone is Feb 5, 2027: First Commission evaluation.
- Who does EU Cyber Solidarity Act apply to?
- Member States, national Cyber Hubs, ENISA, and entities in NIS2 critical sectors that may receive support from the Reserve; trusted managed security service providers.
- What are the penalties under EU Cyber Solidarity Act?
- No direct fines; funding and cooperation instrument.