invidis.com and sixteen-nine.net have united
Ursula von der Leyen, President of the European Commission, in the World Economic Forum in Davos (Image: EC - Audiovisual Service)
Ursula von der Leyen, President of the European Commission, in the World Economic Forum in Davos (Image: EC - Audiovisual Service)

Critical Infrastructure: EU Plans Ban on Chinese Tech

A proposed EU cybersecurity law aims to gradually phase out Chinese companies from critical infrastructure such as telecommunications networks, solar power plants,  and security scanners. In practice, “Logic made in China” is often already banned in public tenders for digital signage infrastructure in defence und police projects.

The European Commission is sharpening the EU’s defensive edge with a new cybersecurity package designed to counter the escalating wave of cyber and hybrid attacks on critical infrastructure and democratic institutions. At the core of the proposal lies a revised Cybersecurity Act aimed at strengthening the resilience of Europe’s ICT supply chains. By simplifying certification procedures and ensuring products are cyber‑secure by design, the Commission wants to make compliance more achievable.

This move comes as part of a review of the EU’s security and technology policy. The review is questioning the dependence on large U.S. technology companies and Chinese “high-risk” suppliers, which some officials believe could be misused to collect sensitive data. The U.S. have long since banned Huawei from its telecommunications networks.

A major focus of the package is the establishment of a trusted, risk‑based ICT supply‑chain framework that enables Member States to jointly identify vulnerabilities across 18 critical sectors. Recent geopolitical tensions have shown how dependencies on high‑risk third‑country suppliers can expose Europe to economic, operational, and strategic risks.

Once approved by Parliament and Council, Member States will have one year to transpose the new rules – marking a significant step toward a more resilient, unified European cybersecurity framework.