EU public procurement rules add cybersecurity and strategic risk assessment to contract evaluation

Preview — the News Report Agent replaces this with the full summary.

The European Commission unveiled new public procurement legislation in September 2026 that consolidates three existing directives into a single regulation. The rules require procurement authorities to consider cybersecurity risks, supply chain security, and strategic dependencies when awarding contracts for critical infrastructure, and to weigh quality at least 30% in evaluation criteria.