Industrial Policy & Trade Monitor· 2679 actions· ✨ 92 recent

Directive (EU) 2022/2557 of the European Parliament and of the Council of 14 December 2022 on the resilience of critical entities, published OJ L 333, 27 December 2022, entered into force 16 January 2023, with Member State transposition deadline 17 October 2024 (rules applicable from 18 October 2024). The CER Directive repeals Council Directive 2008/114/EC on European Critical Infrastructures, extending the scope from two sectors (energy, transport) to eleven essential-service sectors: energy, transport, banking, financial market infrastructures, health, drinking water, wastewater, digital infrastructure, public administration, space, and food. Member States must adopt national resilience strategies, conduct risk assessments at least every four years, identify "critical entities" providing essential services whose disruption would have significant cross-border impacts, and ensure those entities implement technical, security, and organisational resilience measures, business-continuity plans, incident-reporting obligations, and personnel-security background checks. The CER Directive is the physical and hybrid resilience twin to the NIS2 Directive (2022/2555) — the two instruments form the binding EU critical-infrastructure-protection architecture replacing the 2008/114/EC regime.

Directive (EU) 2022/2555 of the European Parliament and of the Council of 14 December 2022 on measures for a high common level of cybersecurity across the Union (NIS 2 Directive), published OJ L 333, 27 December 2022, entered into force 16 January 2023. NIS2 repeals and substantially expands the 2016 NIS1 Directive (2016/1148), extending the scope from ~7 sectors to 18 enumerated essential and important sectors, imposing binding cybersecurity risk- management and incident-reporting obligations on covered entities, introducing board-level management accountability, and mandating Member State transposition by 17 October 2024. NIS2 is the structural EU statutory anchor for national cybersecurity frameworks across the bloc, operating alongside DORA (Reg 2022/2554) for financial-sector digital resilience and CRA (Reg 2024/2847) for product cybersecurity.

On 6 October 2022 the Council of the European Union adopted Council Regulation (EU) 2022/1904, amending Regulation (EU) No 833/2014, as the EU's eighth package of restrictive measures against Russia. It entered into force 7 October 2022. The regulation's headline measure creates the legal basis for an oil price-cap mechanism: a ban on maritime transport to third countries of Russian-origin crude oil and petroleum products, becoming operational once the Council sets an actual cap level by a separate decision (the G7/EU $60/bbl cap followed on 3 December 2022). The package also expands import bans on steel products (phased through 2024), firearms and ammunition, wood pulp and paper, and certain chemicals, cosmetics and jewellery materials; extends export bans on aviation-sector goods; bans the provision of architectural, engineering, IT-consultancy and legal advisory services to the Russian government and Russian companies; and imposes restrictions on Russian-flagged vessels at the Russian Maritime Register.

Council Regulation (EU) 2022/1903 amends Regulation (EU) 2022/263 so that its import ban and export restrictions, previously limited to the non-government-controlled areas of Donetsk and Luhansk, also cover the non-government-controlled areas of Ukraine's Kherson and Zaporizhzhia oblasts. It was adopted on 6 October 2022 alongside the eighth Russia sanctions package and entered into force the day after publication in the Official Journal.

On 8 April 2022 the Council of the European Union adopted Regulation (EU) 2022/576, further amending Regulation (EU) No 833/2014 (the fifth package of measures against Russia). It bans imports of Russian coal and other solid fossil fuels, wood, cement, rubber, fertilisers, high-end seafood and spirits; bans exports to Russia of jet fuel, quantum computers, advanced semiconductors, high-end electronics and sensitive machinery; bars Russian and Belarusian road-freight operators from EU territory; and closes EU ports to Russian-flagged vessels. It entered into force on 9 April 2022, the day after publication in the Official Journal (OJ L 111).

On 15 March 2022 the Council of the European Union adopted Regulation (EU) 2022/428, amending Regulation (EU) No 833/2014 (the fourth package of measures against Russia). It bans imports, purchase and transport of the iron and steel products listed in a new Annex XVII that originate in or are exported from Russia, bans the sale or export of Annex XVIII luxury goods to Russia (above EUR 300 per item unless otherwise specified), and prohibits transactions with the Russian state-controlled entities listed in Annex XIX. The Regulation entered into force on the day after its publication in the Official Journal (OJ L 87 I, 15.3.2022), i.e. 16 March 2022.

On 2 March 2022 the Council of the European Union adopted Regulation (EU) 2022/355, amending Regulation (EC) No 765/2006 concerning restrictive measures in view of the situation in Belarus. It bans importing, purchasing or transporting products originating in or exported from Belarus in wood (Annex X), cement (Annex XI), iron and steel (Annex XII) and rubber (Annex XIII), and extends restrictions to potassium chloride ("potash"), tobacco and mineral products, plus a ban on exporting dual-use goods, machinery (Annex XIV) and goods usable for Belarus's military or security development. The measure responds to Belarus's active facilitation of Russia's invasion of Ukraine. It entered into force the day after publication in the Official Journal (OJ L 67, 2 March 2022), i.e. 3 March 2022, with a wind-down period to 4 June 2022 for pre-existing contracts.

Council Regulation (EU) 2022/263 prohibits importing into the EU any goods originating in the non-government-controlled areas of Ukraine's Donetsk and Luhansk oblasts, and bans the sale, supply, transfer or export of Annex II goods and technology (transport, telecommunications, energy, resource extraction) to those areas. It also bars new investment and financing there. It entered into force the day after adoption, 24 February 2022.