--- title: EU’s hodgepodge tech policy exposes members to Chinese... description: A UK-based think tank, RUSI, argues the EU's patchwork approach to tech procurement policy leaves member states exposed to risks from Chinese vendors like... canonical: https://daily.dev/posts/eu-s-hodgepodge-tech-policy-exposes-members-to-chinese-vendor-risks-says-think-tank-rcu0ufscb twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: EU’s hodgepodge tech policy exposes members to Chinese vendor risks, says think tank | daily.dev og:description: A UK-based think tank, RUSI, argues the EU's patchwork approach to tech procurement policy leaves member states exposed to risks from Chinese vendors like... og:url: https://daily.dev/posts/eu-s-hodgepodge-tech-policy-exposes-members-to-chinese-vendor-risks-says-think-tank-rcu0ufscb og:image: https://api.daily.dev/og/posts/RcU0UFscB.png og:image:alt: EU’s hodgepodge tech policy exposes members to Chinese vendor risks, says think tank og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # EU’s hodgepodge tech policy exposes members to Chinese vendor risks, says think tank **[The Register](https://daily.dev/sources/theregister)** · 7 min read · 0 upvotes · 0 comments ## Summary A UK-based think tank, RUSI, argues the EU's patchwork approach to tech procurement policy leaves member states exposed to risks from Chinese vendors like Huawei and ZTE. Only 10 of 27 EU members have fully implemented the voluntary 5G Security Toolbox since 2020. The European Commission has proposed Cyber Security Act amendments to create a blacklist of untrusted vendors, forcing rip-and-replace within 36 months if passed, with Huawei and ZTE likely candidates. RUSI highlights how Germany, Spain, and the UK treat Chinese vendors very differently based on economic ties and risk tolerance, and warns that blanket bans don't fix underlying software vulnerabilities, while similar scrutiny could eventually extend to US vendors given surveillance concerns tied to laws like the Patriot Act. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### How many EU countries have fully implemented the EU Toolbox for 5G Security? Only 10 of 27 EU member states have fully implemented the voluntary EU Toolbox for 5G Security since it launched in January 2020. The framework sets out harmonized standards to mitigate 5G-related security risks, but because adoption is voluntary, member states have taken widely varying approaches to vetting vendors like Huawei and ZTE. _Infrastructure teams tracking EU telecom security rules can follow policy shifts like this on daily.dev._ ### What happens if the EU Cyber Security Act amendments pass and list Huawei as a high-risk vendor? Countries using equipment from a vendor designated high-risk under the proposed Cyber Security Act amendments would be forced to rip and replace that equipment within 36 months. The European Commission has already indicated it would propose listing Huawei and ZTE should the amendments take effect, though no official legal definition of a high-risk vendor currently exists. _Developers and procurement teams weighing vendor risk can track regulatory shifts like this on daily.dev._ ### What percentage of Germany's and Spain's 5G networks use Chinese equipment? Chinese suppliers accounted for an estimated 59 percent of Germany's 5G RAN and 32 percent of Spain's 5G RAN in 2024. Germany's reliance stems partly from its €251.8 billion annual trade relationship with China, while Spain's share is expected to shrink following controversy over a Huawei contract involving judicial wiretap recordings. _Those evaluating telecom vendor risk exposure can follow coverage of these shifting figures on daily.dev._ ## Similar posts on daily.dev - [China threatens the EU with broad retaliation](https://daily.dev/posts/china-threatens-the-eu-with-broad-retaliation-xfi9skpwk) · The Next Web · 0 upvotes · 0 comments - [EU mulls axing Chinese kit from networks within 3 years](https://daily.dev/posts/eu-mulls-axing-chinese-kit-from-networks-within-3-years-dhwplyp2d) · The Register · 0 upvotes · 0 comments - [EU considers law to phase out Huawei and ZTE equipment from bloc’s telecom networks](https://daily.dev/posts/eu-considers-law-to-phase-out-huawei-and-zte-equipment-from-bloc-s-telecom-networks-gymbfmyya) · TechCrunch · 0 upvotes · 0 comments - [Brussels reissues its Huawei warning, and prepares to make it stick](https://daily.dev/posts/brussels-reissues-its-huawei-warning-and-prepares-to-make-it-stick-adw2hfdja) · The Next Web · 0 upvotes · 0 comments - [Germany and Spain push back on Brussels’ plans to ban Huawei gear bloc-wide](https://daily.dev/posts/germany-and-spain-push-back-on-brussels-plans-to-ban-huawei-gear-bloc-wide-brjnfuu4m) · The Next Web · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#huawei](https://daily.dev/tags/huawei) [View this post on daily.dev](https://daily.dev/posts/eu-s-hodgepodge-tech-policy-exposes-members-to-chinese-vendor-risks-says-think-tank-rcu0ufscb) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"EU’s hodgepodge tech policy exposes members to Chinese vendor risks, says think tank","url":"https://daily.dev/posts/eu-s-hodgepodge-tech-policy-exposes-members-to-chinese-vendor-risks-says-think-tank-rcu0ufscb","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/eu-s-hodgepodge-tech-policy-exposes-members-to-chinese-vendor-risks-says-think-tank-rcu0ufscb"},"datePublished":"2026-10-01T17:31:14.395Z","dateModified":"2026-10-01T17:31:51.173Z","description":"A UK-based think tank, RUSI, argues the EU's patchwork approach to tech procurement policy leaves member states exposed to risks from Chinese vendors like...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/6982362066b6074996c05a0399b1d2da?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/6982362066b6074996c05a0399b1d2da?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"The Register","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"The Register","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/66aa2113fdad463992ffcbf0e8963fda","url":"https://daily.dev/sources/theregister"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/eu-s-hodgepodge-tech-policy-exposes-members-to-chinese-vendor-risks-says-think-tank-rcu0ufscb","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,huawei","timeRequired":"PT7M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"The Register","item":"https://daily.dev/sources/theregister"},{"@type":"ListItem","position":3,"name":"EU’s hodgepodge tech policy exposes members to Chinese vendor risks, says think tank"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/eu-s-hodgepodge-tech-policy-exposes-members-to-chinese-vendor-risks-says-think-tank-rcu0ufscb#faq","mainEntity":[{"@type":"Question","name":"How many EU countries have fully implemented the EU Toolbox for 5G Security?","acceptedAnswer":{"@type":"Answer","text":"Only 10 of 27 EU member states have fully implemented the voluntary EU Toolbox for 5G Security since it launched in January 2020. The framework sets out harmonized standards to mitigate 5G-related security risks, but because adoption is voluntary, member states have taken widely varying approaches to vetting vendors like Huawei and ZTE. Infrastructure teams tracking EU telecom security rules can follow policy shifts like this on daily.dev."}},{"@type":"Question","name":"What happens if the EU Cyber Security Act amendments pass and list Huawei as a high-risk vendor?","acceptedAnswer":{"@type":"Answer","text":"Countries using equipment from a vendor designated high-risk under the proposed Cyber Security Act amendments would be forced to rip and replace that equipment within 36 months. The European Commission has already indicated it would propose listing Huawei and ZTE should the amendments take effect, though no official legal definition of a high-risk vendor currently exists. Developers and procurement teams weighing vendor risk can track regulatory shifts like this on daily.dev."}},{"@type":"Question","name":"What percentage of Germany's and Spain's 5G networks use Chinese equipment?","acceptedAnswer":{"@type":"Answer","text":"Chinese suppliers accounted for an estimated 59 percent of Germany's 5G RAN and 32 percent of Spain's 5G RAN in 2024. Germany's reliance stems partly from its €251.8 billion annual trade relationship with China, while Spain's share is expected to shrink following controversy over a Huawei contract involving judicial wiretap recordings. Those evaluating telecom vendor risk exposure can follow coverage of these shifting figures on daily.dev."}}]} ```