Cybersecurity Review and Digital Networks Act
Opinion factsheet
Sellel lehel
- Research, Innovation and Digital
- Digital transformation
Opinion number:
CDR-0983-2026
Status:
Currently under discussion
Objective
Zdenek Hrib, Rapporteur of the European Committee of the Regions and Member of the Local Assembly of the City of Prague:
• Local and regional authorities will play a key role in implementing new cybersecurity rules, as they provide many frontline public services to citizens.
• Cities operate essential services—such as public transportation systems and e-government platforms—that must be protected against cyber threats.
• Smaller towns are equally important in the cybersecurity landscape, particularly because critical local infrastructure such as hospitals and healthcare services are frequent targets of cyberattacks.
• Levels of preparedness differ significantly across EU Member States and across local authorities, highlighting the need for tailored support and capacity-building.
• Cybersecurity is closely linked to citizens’ trust in public institutions, making effective protection of public services a democratic as well as a technical priority.
• The Committee of the Regions opinion to be voted on in October identifies several priorities, including: avoiding overlaps between the revision of the Cybersecurity Act and the NIS framework; ensuring that EU cybersecurity certification schemes are relevant and accessible for local and regional authorities; promoting EU-level investigations into major cyber incidents; and coupling new regulatory requirements with administrative and technical support, particularly for smaller authorities.
• The Committee of the Regions strongly supports efforts to strengthen cybersecurity, but success will depend on practical implementation that takes into account the realities and specific needs of local and regional authorities.
• Local and regional authorities will play a key role in implementing new cybersecurity rules, as they provide many frontline public services to citizens.
• Cities operate essential services—such as public transportation systems and e-government platforms—that must be protected against cyber threats.
• Smaller towns are equally important in the cybersecurity landscape, particularly because critical local infrastructure such as hospitals and healthcare services are frequent targets of cyberattacks.
• Levels of preparedness differ significantly across EU Member States and across local authorities, highlighting the need for tailored support and capacity-building.
• Cybersecurity is closely linked to citizens’ trust in public institutions, making effective protection of public services a democratic as well as a technical priority.
• The Committee of the Regions opinion to be voted on in October identifies several priorities, including: avoiding overlaps between the revision of the Cybersecurity Act and the NIS framework; ensuring that EU cybersecurity certification schemes are relevant and accessible for local and regional authorities; promoting EU-level investigations into major cyber incidents; and coupling new regulatory requirements with administrative and technical support, particularly for smaller authorities.
• The Committee of the Regions strongly supports efforts to strengthen cybersecurity, but success will depend on practical implementation that takes into account the realities and specific needs of local and regional authorities.