Back to feed
Forrester
Forrester
5/8/2026
Brussels Takes Seven Member States To Court Over CER, And The Consequences Land On You

Brussels Takes Seven Member States To Court Over CER, And The Consequences Land On You

Short summary

The European Commission referred seven EU member states to the Court of Justice for failing to transpose the Critical Entities Resilience (CER) Directive over 18 months past the deadline. CISOs and compliance teams in Bulgaria, France, Luxembourg, Netherlands, Poland, Spain, and Sweden now face accelerated enforcement action and stricter compliance timelines. This signals the EU's commitment to mandatory cybersecurity resilience standards for critical infrastructure operators.

  • EC referred Bulgaria, France, Luxembourg, Netherlands, Poland, Spain, and Sweden to court for CER non-compliance
  • Member states missed directive transposition deadline by 18+ months
  • CISOs in critical infrastructure face accelerated enforcement and tightened compliance timelines

Generated with AI, which can make mistakes.

Is this a good recommendation for you?

Explore more