EU Moves to Make Huawei Ban Legally Binding Across Critical Infrastructure

The European Commission reissued its recommendation in May 2026 to exclude Huawei and ZTE from critical telecom infrastructure, reinforcing a stance it first took in 2020. A January 2026 revision to the EU Cybersecurity Act would transform six years of voluntary guidance into a binding legal obligation, proposing a 36-month phase-out window covering mobile, fixed broadband, and transport infrastructure. Only 13 of 27 EU member states had taken concrete action under the original 2020 framework, highlighting weak compliance with voluntary measures. The proposed legislation is still under review by the European Parliament and Council, with key questions remaining around the phase-out timeline and how heavily exposed nations like Germany may seek to negotiate its terms. Cost estimates for the transition vary sharply — from €10–13 billion by the Commission to €35 billion by industry groups — a gap analysts say reflects the absence of a shared model for mapping the full scope of vendor dependencies involved.