Brussels: The European Commission’s decision in early May to formally recommend that all twenty-seven member states exclude Huawei and ZTE from connectivity infrastructure marks one of the most consequential shifts in Europe’s technology-security posture in a decade. The recommendation, issued on 4 May, widens earlier guidance that had focused narrowly on fifth-generation mobile networks. It now reaches the broader digital plumbing of the Union, signalling that Brussels regards Chinese vendor presence in any layer of critical telecommunications as a strategic liability.
Although the recommendation is not legally binding in its present form, it carries unmistakable political weight. Executive Vice-President for Tech Sovereignty Henna Virkkunen had already signalled the direction in January, when she presented a cybersecurity package envisioning a binding regime in which equipment from designated high-risk suppliers would have to be removed from sensitive infrastructure within thirty-six months of the new rules entering force. The Commission’s May intervention is therefore best understood as a bridge between soft guidance and the harder legal instrument now moving through the legislative process.
The Commission’s stated concern is the structural vulnerability that arises when critical infrastructure depends on suppliers headquartered in a jurisdiction whose authorities can compel cooperation in intelligence operations. Officials have framed the issue not as a verdict on Huawei or ZTE specifically, but as a broader question of state proximity, regulatory accountability and the resilience of the European digital backbone. The framing matters because it mirrors language used in the bloc’s expanding economic-security toolkit, from foreign direct investment screening to anti-coercion mechanisms and outbound investment review.
Member states have responded unevenly. Germany, the Netherlands and Sweden have already taken steps to phase Chinese vendors out of sensitive elements of their networks, but countries with deeper commercial entanglements, particularly in southern and central Europe, have moved more cautiously. The Commission appears to be betting that a unified recommendation will give politically reluctant governments cover to act while raising the cost of inaction. National regulators are likely to face pressure to translate guidance into procurement criteria, licensing conditions and timelines for the replacement of installed equipment.
Beijing has signalled displeasure. Chinese officials have warned Brussels not to convert proposed cybersecurity rules into what they describe as a de facto ban on Chinese firms, framing the measure as discriminatory and inconsistent with the bloc’s commitments to open markets. The diplomatic protest comes alongside parallel commercial frictions, including the Commission’s 5 May decision to impose anti-dumping duties on adipic acid imports from China and earlier action against Chinese glass-fibre producers operating through third countries linked to the Belt and Road Initiative. Taken together, these measures suggest a pattern rather than a single decision, a more assertive Commission willing to deploy trade, competition and security tools in concert.
For European operators, the recommendation crystallises a difficult choice that some have been postponing for years. Replacing installed Chinese equipment is costly and slow, and alternative suppliers face their own capacity constraints. Yet continued reliance now carries reputational, regulatory and increasingly financial risk, particularly for firms competing for public contracts and infrastructure funding. The market signal is unmistakable. Europe’s telecommunications backbone is being rewired around a new geopolitical premise, in which the identity of the supplier is no longer separable from the security of the system. Whether the upcoming legislation will codify the May guidance into binding law, and whether laggard capitals fall into line voluntarily, will define the next phase of the Union’s relationship with Chinese technology firms.




