The GSMA, on behalf of Europe\u2019s mobile operators,\u202fnotes\u202fthe\u202fEuropean Commission\u2019s proposed revision of the Cybersecurity Act.<\/p>\n\n\n\n
Mobile networks are essential societal infrastructure. They represent both a frontline defence and a clear target for disruption.<\/p>\n\n\n\n
In times of geopolitical friction and an ever-evolving risk landscape, substantial\u202finvestment has been and continues to be made by operators to ensure Europe\u2019s digital infrastructure remains secure and resilient. Strengthening security and resilience remains a top priority given how citizens, businesses and public services depend on this digital ecosystem.<\/p>\n\n\n\n
Doing this comes with substantial costs that now risk reducing the resources available for network upgrades and the connectivity improvements users rely on.<\/p>\n\n\n\n
We share the Commission\u2019s objective of reinforcing Europe\u2019s cybersecurity. However, these measures must be strictly risk-based and operationally workable, strengthening cybersecurity risk management while sustaining high-quality connectivity and continued network evolution. The proposed Cybersecurity Act revisions make this challenging and may ultimately undermine European operators\u2019 ability to upgrade networks at pace and meet the continent\u2019s connectivity ambitions.<\/p>\n\n\n\n
Legislative measures on supply chain security should be targeted, risk-based and provide long-term predictability for all affected industries, based on a comprehensive impact assessment, thereby taking into account operational realities and fully respecting that national security matters remain under the competence of EU Member States. Not all equipment elements are equally sensitive, making blanket approaches unnecessary and disproportionate. Beyond the lack of proportionality of the proposed measures, the unrealistic timelines risk significant disruption to services for users as well as high additional expense.<\/p>\n\n\n\n
Europe\u2019s security and resilience is essential, now more than ever. The mobile industry takes its responsibilities seriously and will continue to comply and invest to uphold these high standards. However, EU legislators must recognise that this crucial role requires sustained investment,\u202fand\u202fthe Cybersecurity Act proposal will add significant costs.<\/p>\n\n\n\n