Brussels Reissues Its Huawei Warning and Prepares to Make It Stick
May 4, 2026 – 3:27 pm
The European Commission has formally recommended that member states keep Huawei and ZTE out of their connectivity infrastructure. These restrictions are now moving toward becoming legally binding, with China threatening retaliation.
When the European Commission first asked its member states to exclude Huawei and ZTE from their 5G networks in the 2020 5G Cybersecurity Toolbox, it was a recommendation. Six years later, on May 4, 2026, the Commission reiterated this request, going beyond mobile networks to encompass the wider telecoms infrastructure of the European Union.
Reuters reported that Brussels has formally recommended its 27 member states not use equipment from these two Chinese vendors in their critical network infrastructure. While it seems like a repeat, the Commission aims to shift this into a legally binding obligation through a draft cybersecurity law presented in January.
What the Recommendation Says (and Doesn’t)
The Commission’s text reaffirms its view that Huawei and ZTE pose higher risks than other suppliers in the EU’s connectivity layer. It instructs governments and telecoms operators not to use their equipment in critical infrastructure. However, the recommendation is non-binding, allowing member states to continue using these vendors if they choose.
The change lies in shifting the Commission’s main lever from recommendations to a proposed law. On January 20, 2026, Henna Virkkunen, EU Executive Vice-President for Tech Sovereignty, presented a cybersecurity package designed to make this recommendation mandatory. The proposed law would require removing components from designated high-risk suppliers within 36 months; member states ignoring this could face penalties.
"It didn’t work on a voluntary basis," Virkkunen stated, as reported by Euronews and CNBC.
The May 4 recommendation is a temporary measure while the legislative process unfolds.
Why the Voluntary Phase Failed
Despite steady regulatory pressure over six years, only 13 out of 27 member states had taken concrete 5G security measures against Huawei and ZTE by the time the Commission’s January 2026 package was unveiled.