About the Cyber Solidarity Act

Full name: Regulation (EU) 2025/38 of the European Parliament and of the Council of 19 December 2024 laying down measures to strengthen solidarity and capacities in the Union to detect, prepare for and respond to cyber threats and incidents and amending Regulation (EU) 2021/694 (Cyber Solidarity Act)

(Link to original text)

Type: Regulation

Objective and key elements:

• To improve the preparedness, detection, and response to cybersecurity incidents across the EU
• Creates a “European Cybersecurity Shield”
  • Security Operation Centres (SOCs)
  • Cybersecurity Emergency Mechanism
  • Creating EU Cybersecurity Reserve

Relevant to: Mainly direct to building new functions/procedures within governments and EU institutions. However, the regulation may affect all entities involved in major cyber security incidents.

Status: In force since 4 February 2025.

Earlier versions:

• Text adopted by the Parliament on 24 April 2024 is available here
• Text agreed in the provisional agreement 20 March 2024 is available here
• Commission proposal published on 18 April 2023 is available here

Status:

• European Commission: EU Cyber Solidarity Act Factsheet

(Last updated 31 July 2026)