EU sues Ireland, Spain, France, Netherlands over cybersecurity regulation failings
Thomson Reuters
The European Commission on Wednesday said âit had referred âIreland, Spain, â France and the Netherlands to the âEU's â Court âof Justice âfor what it said âwere failings over â implementing â cybersecurity ârules.
The EU executive's concerns come amid an â increase in cyberhacking targeting both governments and âbusinesses.
In a statement, the European Commission said: "The Directive strengthens EU cybersecurity by setting high standards for entities operating in 18 critical sectors, including health, energy, transport, and the public sector.
"Its full implementation is key to improving the EU's resilience and the incident response capacity of public and private entities operating in these critical sectors, and of the EU as a whole. The Commission sent letters of formal notice on 28 November 2024 and reasoned opinions on 7 May 2025. As these Member States have not yet notified complete transposition of the Directive, the Commission is referring them to the Court of Justice."
The referrals include a request to the Court to impose financial sanctions, a lump sum and daily penalties until notification of complete transposition.
