Council of the European Union and European Parliament 17 April 2019, Regulation (EU) 2019/881 of the European Parliament and of the Council of 17 April 2019 on ENISA (the European Union Agency for Cybersecurity) and on information and communications technology cybersecurity certification and repealing Regulation (EU) No 526/2013 (Cybersecurity Act) (Text with EEA relevance)

Also known as

Regulation (EU) 2019/881 (the 'Cybersecurity Act'), adopted on 17 April 2019 under Article 114 TFEU, establishes a permanent mandate and enhanced tasks for ENISA (the European Union Agency for Cybersecurity) as the Union's centre of expertise on cybersecurity, replacing the time-limited mandate under Regulation (EU) No 526/2013. The Regulation creates a European cybersecurity certification framework empowering the Commission to adopt, by implementing acts, European cybersecurity certification schemes for ICT products, ICT services, and ICT processes at assurance levels 'basic', 'substantial', or 'high', with certification remaining voluntary unless Union or Member State law provides otherwise. National cybersecurity certification authorities are designated to supervise compliance, accredit and oversee conformity assessment bodies, and enforce the framework, with Articles 58, 60, 61, 63, 64, and 65 applying from 28 June 2021.AI