Critical Infrastructure Security
Protection of essential systems and assets—such as water, energy, and transport networks—from physical and cyber threats to ensure operational resilience and public safety.
Foresight tracks Critical Infrastructure Security developments and surfaces the alerts most likely to matter before they turn into missed deadlines, recalls, or escalation work.
Not ready for a trial? Take the 3-minute readiness assessment
Current activity
Intensifying
26% above the prior 8-week baseline
3-month trend
Latest alerts below
Last updated
12 May 2026, 14:56
Latest Critical Infrastructure Security alerts
The most recent regulatory and guidance signals tracked by Foresight
EU Council: Lithuania Comments on Revised TEN-E Regulation Presidency Text
In March 2026 Lithuania submitted detailed comments on the Council Presidency’s draft recast of the EU TEN-E Regulation, challenging aspects of governance, permitting procedures and digitalisation for cross-border energy infrastructure. These positions highlight likely negotiation pressure points on hydrogen and CO2 networks, security of supply and critical infrastructure resilience that could shape the final Grids Package and long-term decarbonisation investment conditions.
European Union
LithuaniaEstonia Adopts Amendments to Essential Liquid Fuel Service Continuity Requirements
In May 2026 Estonia adopted amendments tightening the continuity requirements for essential liquid-fuel supply, imposing new definitions, risk management duties, and backup power obligations on fuel sellers and large tax warehouse operators. These staged obligations between May 2026 and April 2027 will require critical fuel infrastructure providers to invest in autonomous power capability and emergency planning to maintain fuel availability during crises and grid disruptions.
EstoniaEU Council: Estonia Comments on Draft TEN-E Regulation Recast (WK 4386/2026 INIT)
In March 2026 Estonia submitted detailed comments on the Council Presidency’s second compromise text for the recast TEN-E Regulation, focusing on central scenario governance and infrastructure resilience within the EU’s trans-European energy networks. If reflected in the final law, these positions would tighten requirements for how TSOs and regulators plan and model future electricity and hydrogen networks and could broaden support for cross-border grid security investments, influencing long-term capital planning and risk management for energy infrastructure operators.
European UnionEstoniaLuxembourg Adopts Law on Resilience of Critical Entities, Amending 2016 National Protection Law
In May 2026 Luxembourg adopted a new Law on the Resilience of Critical Entities, updating its 2016 framework for the High Commissioner for National Protection and formalising a national resilience regime. This signals tighter oversight of how essential services designated as critical entities prepare for and manage disruptions, meaning affected operators in Luxembourg will need to review governance and contingency arrangements under the new framework.
LuxembourgSweden: Consultations on Cybersecurity Rules for Registered Drinking Water Operators
Sweden’s civil defence authority has opened two April–May 2026 consultations on draft cybersecurity regulations under the Cybersecurity Act for operators, including drinking water producers, supervised by the Swedish Food Agency. These rules will set binding security, training and audit requirements for NIS2‑regulated water operations, so affected operators should review the drafts and prepare comments and implementation plans ahead of expected finalisation in 2026.
SwedenFlorida Enacts Data Center Tariff and Water-Use Law for Large-Load Customers (SB 484, 2026)
Florida has enacted SB 484 (Data Centers), creating new tariff rules, planning controls, and water-use permitting standards for large-load electricity customers and large-scale data centres, with most provisions effective from July 2026. Data centre developers and utilities in Florida will need to reassess site selection, reclaimed water availability, and cost-of-service structures, as non-compliant projects may face permitting barriers, tariff surcharges, or curtailment priorities that materially affect project economics and timelines.
United StatesNew Hampshire HB1723 Would Direct Department of Energy To Investigate Transformer Vulnerabilities
A New Hampshire bill would direct the state Department of Energy to investigate vulnerabilities of high-voltage transmission transformers to geomagnetic and electromagnetic disturbances and report findings and recommendations, with the Senate now moving to refer it to an interim study. If adopted, this could shape future grid-resilience expectations and cost recovery mechanisms for utilities and large power users in New Hampshire, signalling greater regulatory focus on space-weather and electromagnetic pulse risks to critical electric infrastructure.
United StatesSwitzerland ElCom Warns of Gas-Driven Electricity Supply Risks and Calls for Grid Legal Reforms
In May 2026 Switzerland’s electricity regulator ElCom confirmed that last winter’s power supply remained secure but warned of new gas-related risks to electricity security for winter 2026/27 linked to the Iran war and low European gas storage levels. The outlook signals potential legal reforms to accelerate transmission grid renewal and simplify permitting, and highlights residual supply and price risks that manufacturers should incorporate into contingency planning and energy procurement strategies.
SwitzerlandConnecticut HB 5472 Placed on Senate Calendar — Safety and Incident Reporting for Energy Generation and Storage Facilities
Connecticut lawmakers have moved HB 5472 onto the Senate calendar; the bill would mandate incident reporting, emergency contacts, emergency training and restart-planning reviews for certain large electric generation and storage facilities. If enacted, this framework would significantly tighten safety, emergency preparedness and grid-reliability obligations for affected power producers and storage operators in Connecticut, with staged implementation dates from late 2026 through 2028.
United StatesUS FAA Proposes Unmanned Aircraft Flight Restrictions Around Critical Fixed-Site Facilities
The US Federal Aviation Administration has proposed a new rule to create Unmanned Aircraft Flight Restriction zones around designated critical fixed-site facilities, with public comments due by 6 July 2026. If adopted, operators of high-risk chemical, energy, water, nuclear and other critical infrastructure sites could apply to restrict drone overflights, adding a security and compliance layer that may influence facility protection strategies and UAS-based operations.
United StatesUS TSA Seeks Comment on Revised Critical Facility Information Collection From Top 100 Pipeline Operators
The Transportation Security Administration has issued a 30-day notice to revise its information collection on critical facility security for the top 100 pipeline operators under the 9/11 Act and the Paperwork Reduction Act. Pipeline operators should note the reduced cybersecurity reporting obligations and submit any comments on the updated documentation burden and scope by 5 June 2026, as this will shape TSA’s future oversight of critical pipeline facilities.
United StatesNetherlands Amends Energy Regulation: Protection of Vital System Processes and Project Decisions for Large Electrolysers
In April 2026 the Dutch government adopted an amendment to the Energy Act’s implementing rules that tightens protection of electricity and gas system operators’ vital processes and establishes a ministerial project-decision regime for large-scale hydrogen electrolysers from mid-2026. This raises confidentiality, procurement and registration burdens for network operators and means developers of 100 MW-plus electrolysers outside key industrial clusters face a more centralised, higher-profile permitting pathway that should be factored into siting, timing, and investment decisions.
NetherlandsEuropean Parliament DEVE Committee Amendments to Draft Opinion on Union Civil Protection Mechanism and Health Emergency Preparedness
In April 2026, the European Parliament’s Development Committee tabled extensive amendments to its draft opinion on the new Union Civil Protection Mechanism and health emergency preparedness Regulation. If carried into the final text, these proposals would tighten conditions on national disaster planning, funding eligibility and rapid-response capacity, signalling a more demanding framework for public authorities and operators involved in civil protection and health-crisis management.
European UnionNetherlands Publishes National Oil Crisis Plan For Oil Supply Emergencies (LCP-O)
In April 2026 the Dutch government released a public National Oil Crisis Plan (LCP-O) that explains how it would manage severe crude oil and oil product shortages using EU and national stockholding rules and emergency powers. For oil, logistics and chemical operators in the Netherlands, this clarifies when fuel rationing, strategic stock releases and priority-user decisions could constrain or protect operations, making it a key input for contingency planning and resilience strategies.
NetherlandsUS Senate Engrosses Pipeline Safety Act of 2025 (S. 2975)
In April 2026 the US Senate passed and engrossed S. 2975, the Pipeline Integrity, Protection, and Enhancement for Leveraging Investments in the Nation's Energy to assure Safety Act of 2025, advancing a broad reauthorisation and modernisation package for federal pipeline safety programmes through 2030. This step does not change the bill’s substance relative to the earlier reported version but significantly increases its likelihood of becoming law, so operators should track House action and prepare for potential new requirements on hydrogen and CO2 pipelines, mapping, inspections, penalties, information-sharing and municipal gas system upgrades.
United StatesChina Politburo Calls For Stronger Natural Disaster Prevention And Response Capacity
In April 2026, Xi Jinping used a Politburo collective study session to call for significantly stronger national capabilities to prevent, mitigate and respond to natural disasters in China. This sets a clear political mandate for ministries and local governments to tighten disaster‑risk assessments, infrastructure and planning standards, monitoring, and emergency‑response systems, foreshadowing future changes to technical and governance requirements.
ChinaEU Commission Refers Seven Member States to CJEU Over Failure to Transpose Critical Entities Resilience Directive
In April 2026, the European Commission referred Bulgaria, France, Luxembourg, the Netherlands, Poland, Spain and Sweden to the EU Court of Justice for failing to transpose the Critical Entities Resilience Directive, after they missed the 2024 transposition deadlines. This signals tighter enforcement of EU infrastructure-resilience rules, meaning energy, transport, water, digital, financial and other critical-infrastructure operators in these Member States should expect fully operational CER regimes and closer scrutiny once national laws are finally adopted.
European Union
Bulgaria
FranceLuxembourgNetherlands
Poland
SpainSwedenCalifornia AB 2543 Would Require Emergency Preparedness Planning for DC Fast Charging Station Sites
In April 2026, California lawmakers advanced AB 2543, a bill that would require the state energy commission to identify critical DC fast charging sites and impose emergency backup power planning duties on charging‑site operators and utilities. If enacted, this would tighten resilience expectations for EV charging networks in California by 2027–2028, requiring operators and utilities to factor prolonged power disruptions into infrastructure investment and emergency planning.
United StatesSödermanland County Publishes Updated Flood Hazard And Risk Maps For Eskilstuna
In April 2026, Södermanland County and the Swedish Civil Defence Agency published updated flood hazard and risk maps for Eskilstuna under Sweden’s Flood Risk Ordinance. These maps, available via the national Flooding Portal, give operators with environmentally hazardous activities and critical infrastructure a sharper basis to reassess flood exposure, emergency planning, and longer-term land-use or permitting strategies.
SwedenIndiana IDEM Reminds Water And Wastewater Facilities Of SEA 459 Cybersecurity Certification Deadline
Indiana has enacted Senate Enrolled Act 459 requiring designated public water and wastewater utilities to perform annual cybersecurity vulnerability assessments and certify compliance, with the first certification due by 31 December 2026. This creates a new statutory cyber compliance program for critical water infrastructure, so operators should align risk management, incident reporting, and budgeting well ahead of the 2026 deadline to avoid regulatory and operational exposure.
United StatesNot a newsletter. Not a feed.
Structured intelligence mapped to your business.
These are just a few of the most recent Critical Infrastructure Security alerts. Foresight tracks every jurisdiction, every day — and surfaces only what affects your portfolio, with full citations and evidence.
Start free trialFrequently asked questions
Everything you need to know about Foresight's regulatory intelligence platform
Still have questions? Get in touch with our team
Join 3,500+ professionals staying ahead
Subscribe to Foresight Weekly for expert-picked regulatory developments across chemicals, sustainability, product safety, ESG, and HSE.
Free forever. Unsubscribe anytime.
Read by professionals at
