EU Implements New Cybersecurity Package Affecting Companies

On February 9, 2026, the European Union proposed a new cybersecurity package that elevates cybersecurity certification to a compliance and risk-management instrument. Companies operating in the EU will be required to disclose sensitive information, including ransom payments, only upon request from the Computer Security Incident Response Team or relevant authorities. These reforms aim to enhance cybersecurity measures across the region.