Status: The Regulation is adopted and in force since 4th February 2025.
EUR-Lex: Adopted and published version, including other language versions, can be found here.
Full name: Regulation (EU) 2025/38 of the European Parliament and of the Council of 19 December 2024 laying down measures to strengthen solidarity and capacities in the Union to detect, prepare for and respond to cyber threats and incidents and amending Regulation (EU) 2021/694 (Cyber Solidarity Act)
Type: Regulation
Objective and key elements:
- To improve the preparedness, detection and response to cybersecurity incidents across the EU
- Creates a “European Cybersecurity Shield”
- Security Operation Centres (SOCs)
- Cybersecurity Emergency Mechanism
- Creating EU Cybersecurity Reserve
Relevant to: Mainly direct to building new functions/procedures within governments and EU institutions. However, the regulation may affect all entities involved in major cyber security incidents.
Old versions documents:
- Text agreed in the provisional agreement 20 March 2024, link
- Commission proposal, published on 18 April 2023, link
(Last updated 27 October 2025)