EU Introduces Strict New Security Rules for VPNs with Industry Collaboration

Summary

The European Telecommunications Standards Institute (ETSI) has introduced new security requirements for VPNs under the Cyber Resilience Act, with major industry players like NordVPN and Surfshark contributing to their development. These new rules mandate that all VPNs sold in Europe meet auditable standards for encryption, authentication, and vulnerability management, aiming to establish a higher baseline of protection for users.