This Week in ICT & Cybersecurity — Brussels (#29, 2026)
EU-Norway, EU-Iceland secure connectivity agreements; Critical Raw Materials Act strategic projects designated; Defence Directive updated; Asset recovery protocol signed.
October 19, 2026 to October 25, 2026
EU-Norway, EU-Iceland secure connectivity agreements; Critical Raw Materials Act strategic projects designated; Defence Directive updated; Asset recovery protocol signed.
📋 In This Week's Newsletter
• ⚖️ EU Legislation
• 📚 What We're Reading This Week
EU Legislation (Official Journal)
EU-Norway Secure Connectivity Agreement
The Agreement between the European Union and the Kingdom of Norway laying down the rules for participation in the GOVSATCOM component of the Union Space Programme and in the Union Secure Connectivity Programme was published in the Official Journal (CELEX: 32026A2323) on 20 October 2026. Norway can authorise users, provide satellite capacities, and designate a competent secure connectivity authority under Regulation (EU) 2021/696 and Regulation (EU) 2023/588. The agreement also covers radio spectrum cooperation and access to governmental services, with joint committee oversight and provisions for security and dispute settlement.
Council Decision on EU-Norway GOVSATCOM Agreement
Council Decision (EU) 2026/2322 of 9 October 2026, published 20 October 2026 (CELEX: 32026D2322), formally concludes the agreement between the EU and Norway for participation in GOVSATCOM and the Union Secure Connectivity Programme. The Decision notes parliamentary consent and cross-references Decision (EU) 2026/442, aligning with the EU Space Strategy for Security and Defence.
EU-Iceland Secure Connectivity Agreement
The Agreement between the EU and Iceland regarding participation in the GOVSATCOM component and the Union Secure Connectivity Programme was published on 22 October 2026 (CELEX: 32026A2350). The document outlines Iceland's rights as a GOVSATCOM and Secure Connectivity Participant, the designation of a competent authority, and the terms for access to governmental and satellite services. Terms also specify financial contributions, committee participation, and provisions for enhanced Arctic coverage.
Council Decision on EU-Iceland Secure Connectivity Agreement
Council Decision (EU) 2026/2351 of 9 October 2026, published 22 October 2026 (CELEX: 32026D2351), approves the agreement with Iceland for participation in the Union Space Programme and Secure Connectivity. The Decision follows previous Council Decision (EU) 2026/434 and records the date of entry into force as the date of adoption.
Commission Decision on Strategic Critical Raw Material Projects
Commission Decision (EU) 2026/2349 of 9 October 2026 (CELEX: 32026D2349), published 22 October 2026, recognises 46 critical raw material projects as Strategic Projects under Regulation (EU) 2024/1252. The projects, spanning extraction, processing, and recycling, were selected after assessment against criteria in Article 6(1) and following Board opinion. The Decision addresses project promoters and provides for notification and Member State involvement.
Update to Defence Products Directive
Commission Delegated Directive (EU) 2026/2325 of 10 July 2026 (CELEX: 32026L2325), published 19 October 2026, updates Directive 2009/43/EC to align the list of defence-related products with the Common Military List of the European Union adopted on 23 February 2026. Member States must transpose provisions by 31 January 2027 and apply them from 5 February 2027.
Council Decision on Asset Recovery Protocol
Council Decision (EU) 2026/2355 of 13 October 2026 (CELEX: 32026D2355), published 21 October 2026, authorises the signing of the Additional Protocol to the Council of Europe Convention on Laundering, Search, Seizure and Confiscation of the Proceeds from Crime and on the Financing of Terrorism. The Protocol provides for enhanced judicial and police cooperation, asset recovery, and procedural safeguards, noting alignment with Directive (EU) 2024/1260, Directive (EU) 2024/1640, and Regulation (EU) 2018/1805.
What We're Reading This Week
- Inside the cyber flaw scramble that brought the AI threat to life: A critical software vulnerability accelerated real-world AI risks, prompting urgent industry responses to strengthen digital security.
