The European Commission proposed a new cybersecurity package at the end of January 2026.

Omissions

• The exact date of the proposal was 20 January 2026, not the final days of January. The MEP's phrasing 'end of January' slightly overstates how late in the month the proposal was made.
• The cybersecurity package included multiple components: a proposal for a revised Cybersecurity Act, a proposal for a Directive on simplification measures, and the broader Cybersecurity Package which also relates to the Digital Networks Act.

Sources

• PrimaryEuropean Commission Press CornerThe European Commission published a press release on 20 January 2026 titled 'Commission strengthens EU cybersecurity resilience and capabilities,' announcing a comprehensive new cybersecurity package including a proposal for a revised Cybersecurity Act.
• PrimaryEuropean Commission Digital Strategy (Shaping Europe's Digital Future)Publication dated 20 January 2026: 'The Commission has proposed a new cybersecurity package to further strengthen the EU's cybersecurity resilience and capabilities.' The page links to the 20 January 2026 press release.
• SecondaryMayer Brown (international law firm)On 20 January 2026, the European Commission proposed a comprehensive new cybersecurity package with the aim of strengthening the European Union's cybersecurity resilience and capabilities.
• SecondaryGA-Alliance (European tech policy association)On 20 January 2026, the European Commission presented a comprehensive 'Cybersecurity Package', proposing a targeted revision of the EU Cybersecurity Act.