Cyber Solidarity Act

Committee on Industry, Research and Energy

European Parliament legislative resolution of 24 April 2024 on the proposal for a regulation of the European Parliament and of the Council laying down measures to strengthen solidarity and capacities in the Union to detect, prepare for and respond to cybersecurity threats and incidents (COM(2023)0209 – C9-0136/2023 – 2023/0109(COD))

(Ordinary legislative procedure: first reading)

The European Parliament,

–having regard to the Commission proposal to Parliament and the Council (COM(2023)0209),

–having regard to Article 294(2) and Articles 173(3) and 322(1), point (a), of the Treaty on the Functioning of the European Union, pursuant to which the Commission submitted the proposal to Parliament (C90136/2023),

–having regard to Article 294(3) of the Treaty on the Functioning of the European Union,

–having regard to the opinion of the Court of Auditors of 18 April 2023,

–having regard to the opinion of the European Economic and Social Committee of 13 July 2023,

–having regard to the opinion of the Committee of the Regions of 30 November 2023,

–having regard to the provisional agreement approved by the committee responsible under Rule 74(4) of its Rules of Procedure and the undertaking given by the Council representative by letter of 21 March 2024 to approve Parliament’s position, in accordance with Article 294(4) of the Treaty on the Functioning of the European Union,

–having regard to Rule 59 of its Rules of Procedure,

–having regard to the opinions of the Committee on Foreign Affairs and the Committee on Transport and Tourism,

–having regard to the report of the Committee on Industry, Research and Energy (A9-0426/2023),

1.Adopts its position at first reading hereinafter set out;

2.Takes note of the statement by the Commission annexed to this resolution, which will be published in the C series of the Official Journal of the European Union;

3.Calls on the Commission to refer the matter to Parliament again if it replaces, substantially amends or intends to substantially amend its proposal;

4.Instructs its President to forward its position to the Council, the Commission and the national parliaments.

P9_TC1-COD(2023)0109

Position of the European Parliament adopted at first reading on 24 April 2024 with a view to the adoption of Regulation (EU) 2025/… of the European Parliament and of the Council laying down measures to strengthen solidarity and capacities in the Union to detect, prepare for and respond to cyber threats and incidents and amending Regulation (EU) 2021/694 (Cyber Solidarity Act)

(As an agreement was reached between Parliament and Council, Parliament's position corresponds to the final legislative act, Regulation (EU) 2025/38.)

ANNEX TO THE LEGISLATIVE RESOLUTION

Commission’s statement on budget with regards to Regulation (EU) 2025/38 of the European Parliament and of the Council of 19 December 2024 laying down measures to strengthen solidarity and capacities in the Union to detect, prepare for and respond to cybersecurity threats and incidents (Cyber Solidarity Act)

1. The Commission’s Legislative Financial Statement accompanying the proposal on the Cyber Solidarity Act was published in April 2023. Since then, the relevant estimated figures have changed due to the adoption or expected adoption of other legislative acts.

2. On 5 March 2024, the co-legislators reached a preliminary political agreement to limit to EUR 22 million the reallocation from the Specific Objective 4 “Advanced Digital Skills” to the Specific Objective 3 “Cybersecurity and Trust” of the Digital Europe Programme foreseen in the Legislative Financial Statement.

3. To reflect the terms of the preliminary political agreement, the Commission updated the Legislative Financial Statement of the Cyber Solidarity Act with regards to the financial envelopes for the Specific Objectives 2 “Artificial Intelligence”, 3 “Cybersecurity and Trust” and 4 “Advanced Digital Skills”, taking into account the reallocations as agreed by the co-legislators.

4. Accordingly, the financial envelopes for the period 2025-2027 presented in the updated Legislative Financial Statement, without prejudice to the powers of the Commission in the context of the annual budgetary procedure, are the following:

[EUR544 726 000] for Specific Objective 2 “Artificial Intelligence”, taking into account EUR 65 million reallocated to Specific Objective 3 “Cybersecurity and Trust”;

[EUR 44 451 000] for Specific Objective 3 “Cybersecurity and Trust” - part under the direct management of the Commission, including EUR 26 million reallocated from Specific Objectives 2 and 4.

[EUR 353 190 613] for Specific Objective 3 “Cybersecurity and Trust” - part managed by the European Cybersecurity Competence Centre, including the reallocation of EUR 61 million from Specific Objectives 2 and 4.

[EUR 167 162 423] for Specific Objective 4 “Advanced Digital Skills”, taking into the reallocation of EUR 22 million to Specific Objective 3 “Cybersecurity and Trust”.

5. The EU Cybersecurity Reserve will be funded from the financial envelope of the Specific Objective 3 “Cybersecurity and Trust”– part under the direct management of the Commission (which according to the updated LFS is estimated at EUR [44 451 000]).