Cybersecurity Act: every version and what changed

Regulation (EU) 2019/881 of the European Parliament and of the Council of 17 April 2019 on ENISA (the European Union Agency for Cybersecurity) and on information and communications technology cybersecurity certification and repealing Regulation (EU) No 526/2013 (Cybersecurity Act) (Text with EEA relevance)

32019R0881 · Cybersecurity · newest amendment in force 4 February 2025

Atom feed · Watch this act · on EUR-Lex (external, EUR-Lex)

Versions, newest first

What the tags on these versions mean

Version in force 4 February 2025

Made by Regulation (EU) 2025/37 32025R0037 on EUR-Lex (external, EUR-Lex)

Regulation (EU) 2025/37 of the European Parliament and of the Council of 19 December 2024 amending Regulation (EU) 2019/881 as regards managed security services (Text with EEA relevance)

18 changes in this version

All explained

32019R0881 → 02019R0881-20250204

Index of this act

Touched provisions

Art. 1 Modified Subject matter and scope
Art. 2 Modified Definitions
Art. 4 Modified Objectives
Art. 8 Modified Market, cybersecurity certification, and standardisation
Art. 46 Modified European cybersecurity certification framework
Art. 47 Modified The Union rolling work programme for European cybersecurity certification
Art. 49 Modified Preparation, adoption and review of a European cybersecurity certification scheme
Art. 49a Inserted Information and consultation on the European cybersecurity certification schemes
Art. 51 Modified Security objectives of European cybersecurity certification schemes for ICT products, ICT services and ICT processes
Art. 51a Inserted Security objectives of European cybersecurity certification schemes for managed security services
Art. 52 Modified Assurance levels of European cybersecurity certification schemes
Art. 53 Modified Conformity self-assessment
Art. 54 Modified Elements of European cybersecurity certification schemes
Art. 56 Modified Cybersecurity certification
Art. 57 Modified National cybersecurity certification schemes and certificates
Art. 58 Modified National cybersecurity certification authorities
Art. 59 Modified Peer review
Art. 67 Modified Evaluation and review

Versions

4 February 2025 by Regulation (EU) 2025/37

Dates named

Dates the amended text names

Every date an amendment added to or removed from a provision's text, as the parser read it, with the provision and the version. This is a list of dates the text contains. Whether a provision applies from one of them is stated for each change under "applies from", and nowhere else.

2025-02-04 added to Art. 56 · in force 2025-02-04