![\"\"](\"https:\/\/adcecija.pt\/wp-content\/uploads\/2026\/02\/A-Debatable-and-Debated-Proposal-640x360.jpg\")
<\/p>\n<\/p>\n
<\/p>\n
The CSA2 proposal (revision of the Cyber Security Act) will face intense discussions among the Council, European Parliament, and Commission, with several provisions contested due to identified weaknesses.<\/p>\n
<\/p>\n
Jos\u00e9 Lu\u00eds da Cruz Vila\u00e7a<\/a>, coordinating partner of the European Union Law and Competition<\/a> practice at Antas da Cunha Ecija, Paulo de Almeida Sande<\/a>, partner in the same practice and Mariana Tavares<\/a>, counsel in the same practice, analyze the main issues.<\/p>\n <\/p>\n At the core lies the division of competences between the EU and Member States, particularly sensitive in national security\u2014an exclusive Member State competence, provided fundamental EU principles are respected. Article 114 TFEU (internal market, shared competence) is not an adequate legal basis.<\/p>\n <\/p>\n Concepts such as HRS and high-risk countries create discretionary uncertainty from the Commission. The erroneous application of proportionality and subsidiarity limits national sovereignty in exclusive areas.<\/p>\n <\/p>\n Given the current geopolitical turbulence, the proposal risks exacerbating tensions, as seen in debates on the digital package, original CSA, and 5G Toolbox.<\/p>\n <\/p>\n A less restrictive, more balanced legislative process is recommended\u2014one that respects the EU\u2019s constitutional architecture\u2014across the pillars of ENISA, ECCF, NIS2, and secure TIC supply chains.<\/p>\n <\/p>\n