EU cyber resilience rules expand

The cluster is centered on the European Commission’s 2026 cybersecurity package, especially Cybersecurity Act 2 and targeted NIS2 amendments.

The dominant pattern is regulatory consolidation: harmonized supply-chain security rules, expanded ENISA coordination, streamlined certification, and more unified incident reporting. Privacy relevance appears mainly through breach reporting, identity wallet oversight, and GDPR alignment rather than standalone privacy policy change.