The China Council for the Promotion of International Trade (CCPIT) on Friday expressed strong opposition to the European Union’s proposed revisions to its Cybersecurity Act, criticizing aspects of the draft as unreasonable and potentially discriminatory. The draft legislation introduces so-called “non-technical risk” criteria that would associate cybersecurity threats with companies based on their country of origin or national affiliations, effectively aiming to exclude certain suppliers from EU supply chains, according to Wang Yifei, spokesperson for CCPIT.

At a press conference, Wang described this approach as unjustified and harmful, stating that the China Chamber of International Commerce has formally submitted feedback to EU authorities on behalf of Chinese businesses. Wang warned that excluding suppliers from specific countries on generalized security grounds risks undermining the legitimate rights of affected companies, including those from China, while also damaging the EU’s reputation for openness, fairness, and predictability in its business environment.

Wang further emphasized the role of Chinese enterprises as key partners for Europe, particularly in areas such as digital transformation, green transition, and industrial modernization. He highlighted the willingness of the Chinese business community to collaborate with EU counterparts to advance cybersecurity governance and the development of the digital economy. Additionally, Wang called for maintaining an open, fair, and non-discriminatory market framework to support the stability and efficient functioning of global industrial and supply chains.

The CCPIT’s comments come amid ongoing debates within the EU over how to balance cybersecurity concerns with trade openness, particularly given rising geopolitical tensions and increasing scrutiny of supply chain security. While EU officials argue that enhancing cybersecurity standards and managing associated risks are essential for protecting critical infrastructure and digital services, critics caution against blanket restrictions that could disrupt economic cooperation and impose unfair barriers on foreign companies.

The proposed EU Cybersecurity Act revisions remain under review, with discussions continuing among member states and stakeholders before any final legislation is adopted.