Commission Delegated Regulation (EU) 2025/1759: This regulation is a technical correction to Delegated Regulation (EU) 2024/1366. It addresses errors in the Czech, Danish, Dutch, French, German, Irish, Polish, Portuguese, and Swedish language versions. The errors relate to the list of supply chain cyber threats outlined in Article 18(2)(a)(iii), (a)(iv), and (a)(v) of the original regulation. The English language version of Delegated Regulation (EU) 2024/1366 is not affected by these corrections. The regulation came into force twenty days after its publication in the Official Journal of the European Union.
EFTA Court Judgment (Iceland – SPCs for medicinal products): The EFTA Court ruled that Iceland failed to implement Regulation (EU) 2019/933, which concerns supplementary protection certificates (SPCs) for medicinal products and amends Regulation (EC) No. 469/2009. This failure constitutes a breach of Iceland’s obligations under the Agreement on the European Economic Area (EEA). Iceland is required to cover the costs of the legal proceedings.
EFTA Court Judgment (Iceland – IORPs): The EFTA Court found that Iceland failed to implement Directive (EU) 2016/2341 regarding Institutions for Occupational Retirement Provision (IORPs). This failure to implement the Directive, or even inform the EFTA Surveillance Authority about its implementation, violates Iceland’s obligations under the EEA Agreement. Iceland is ordered to pay the costs associated with the proceedings.
Review of each of legal acts published today:
Commission Delegated Regulation (EU) 2025/1759 of 19 June 2025 correcting certain language versions of Delegated Regulation (EU) 2024/1366 supplementing Regulation (EU) 2019/943 of the European Parliament and of the Council by establishing a network code on sector-specific rules for cybersecurity aspects of cross-border electricity flows
This Commission Delegated Regulation (EU) 2025/1759 serves to correct errors found in specific language versions of Delegated Regulation (EU) 2024/1366, which concerns cybersecurity rules for cross-border electricity flows. The corrections address inaccuracies in the Czech, Danish, Dutch, French, German, Irish, Polish, Portuguese, and Swedish language versions, specifically within Article 18(2), points (a)(iii), (a)(iv) and (a)(v), related to the list of supply chain cyber threats. These errors were deemed to affect the substance of the provision.
The regulation consists of two articles. Article 1 contains the corrections to the specific language versions of Delegated Regulation (EU) 2024/1366, but does not concern the English language version. Article 2 stipulates that the regulation will come into force twenty days after its publication in the Official Journal of the European Union and ensures that the regulation is binding and directly applicable in all Member States.
The most important aspect of this regulation is the correction of errors in the specified language versions of Delegated Regulation (EU) 2024/1366, particularly concerning the list of cyber threats to the electricity supply chain. Stakeholders using these language versions should take note of these corrections to ensure accurate implementation of the cybersecurity network code.
JUDGMENT OF THE COURT of 7 May 2025 in Case E-29/24 – EFTA Surveillance Authority v Iceland (Failure by an EFTA State to fulfil its obligations – Failure to implement Regulation (EU) 2019/933 – Supplementary protection certificate for medicinal products)
This is a judgment by the EFTA Court regarding Iceland’s failure to implement Regulation (EU) 2019/933, which amends Regulation (EC) No. 469/2009 concerning supplementary protection certificates (SPCs) for medicinal products. The EFTA Surveillance Authority brought the case against Iceland for not incorporating this EU regulation into its national law as required by the Agreement on the European Economic Area (EEA). The Court ruled that Iceland failed to fulfill its obligations under the EEA Agreement. Iceland is ordered to bear the costs of the proceedings.
The judgment consists of a declaration that Iceland has failed to fulfill its obligations under Article 7 of the EEA Agreement. This failure concerns the act referred to at point 6 of Annex XVII to the EEA Agreement, specifically Regulation (EU) 2019/933. The judgment also includes an order for Iceland to bear the costs of the proceedings. There are no changes compared to previous versions, as this is the initial judgment on the matter.
The most important provision is the declaration that Iceland has failed to fulfill its obligations under the EEA Agreement by not implementing Regulation (EU) 2019/933. This means Iceland is legally bound to take the necessary steps to incorporate the EU regulation on supplementary protection certificates for medicinal products into its national law.
JUDGMENT OF THE COURT of 7 May 2025 in Case E-28/24 – EFTA Surveillance Authority v Iceland (Failure by an EFTA State to fulfil its obligations – Failure to implement Directive (EU) 2016/2341 – Activities and supervision of institutions for occupational retirement provision)
This is a judgment by the EFTA Court regarding Iceland’s failure to implement Directive (EU) 2016/2341 on the activities and supervision of Institutions for Occupational Retirement Provision (IORPs). The EFTA Surveillance Authority brought the case against Iceland for not adopting the necessary measures to implement the Directive within the prescribed timeframe, or for failing to inform the Authority about the implementation. The Court ruled in favor of the EFTA Surveillance Authority, declaring that Iceland failed to fulfill its obligations. Iceland is ordered to bear the costs of the proceedings.
The judgment consists of a brief introduction outlining the case, the application by the EFTA Surveillance Authority, and a reference to the relevant legal acts. The operative part of the judgment contains two points: the declaration of Iceland’s failure to fulfill its obligations and the order for Iceland to bear the costs. There are no changes compared to previous versions, as this is an initial judgment on the matter.
The most important provision is the declaration that Iceland has failed to fulfill its obligations under Directive (EU) 2016/2341, as adapted by Protocol 1 to the EEA Agreement, and under Article 7 of the EEA Agreement. This means Iceland is in breach of its obligations under the EEA Agreement and must now take steps to implement the Directive to comply with the judgment.
