ECCC approves 2024 accounts: what it means for cybersecurity companies

Key data

Technology and cybersecurity sector companies working with European funds have one more certainty: the European Centre for Cybersecurity Competence (ECCC), headquartered in Bucharest, has passed the audit control for fiscal year 2024 without relevant objections. Decision (EU) 2026/1674 of the European Parliament, adopted on 29 April 2026, formalizes this result.

This is not a regulatory change that requires immediate action, but it is a relevant institutional signal: the ECCC operates with full normality and its financing and collaboration channels remain open for the next fiscal year.

What does this regulation establish?

This decision is the result of the annual budget discharge procedure, through which the European Parliament oversees the use of European public funds by EU bodies. In practical terms, it means that:

• The ECCC accounts for fiscal year 2024 have been reviewed and approved without relevant objections.
• The body has demonstrated budget management in accordance with European audit standards.
• The ECCC is enabled to continue operating normally in the next budget fiscal year.
• Institutional confidence in the centre as a coordinator of investments in industrial, technological and research cybersecurity across the EU is reinforced.

The ECCC coordinates cybersecurity investments on a European scale, acting as a central point for research projects, technological development and innovation in the field of industrial digital security. Its annual budget approval is the mechanism that guarantees the continuity of these programmes.

It is important to emphasize that this decision does not introduce direct regulatory changes for private operators. It does not generate new obligations, does not modify deadlines and does not impose sanctions. Its relevance is of an institutional and strategic nature.

Economic and operational impact

Although this decision does not imply direct costs for companies, its operational impact is real for those working in the European cybersecurity ecosystem:

• Continuity of calls: The approval of accounts without objections guarantees that the ECCC can launch new project and financing calls in 2026 without administrative interruptions.
• Stability as a partner: Companies already collaborating with the ECCC or in the process of joining European cybersecurity projects can plan with greater security in the medium term.
• Signal for investors: Approval without objections reinforces the credibility of the ECCC with private investors and industrial partners who evaluate the institutional solidity of the body before committing resources.
• No impact on operating costs: There are no new fees, compliance requirements or administrative burdens directly derived from this decision.

Who does it affect?

This decision has direct or indirect relevance for the following profiles:

• Technology companies that participate or aspire to participate in projects financed or coordinated by the ECCC.
• Cybersecurity specialist companies (industrial, critical infrastructure, research) operating in the European market.
• Research centres and universities collaborating with the ECCC on digital security R&D projects.
• CFOs and financial directors of companies with active or planned European financing lines through the ECCC.
• Advisors and consultants accompanying clients in accessing European cybersecurity funds.
• European institutions and public administrations coordinating projects with the ECCC at national or regional level.

For other sectors and companies without links to the ECCC, this regulation has no immediate operational impact.

Practical example

A Spanish industrial cybersecurity company that has been participating for two years in a European consortium coordinated by the ECCC, headquartered in Bucharest, was awaiting confirmation that the body would continue operating normally in 2026. The approval of the 2024 accounts without objections is precisely that confirmation.

This company can now:

• Plan its participation in new ECCC calls for 2026 without uncertainty about the continuity of the body.
• Present to its board of directors or investors the approval as evidence of the institutional solidity of the European partner.
• Continue the administrative procedures of ongoing projects without needing to revise its collaboration strategy with the ECCC.

In contrast, a company from another sector with no links to the ECCC does not need to take any action derived from this decision.

What should companies do now?

1. If you collaborate with the ECCC: Confirm with your contact at the body that ongoing projects remain active and consult the calendar of new calls for 2026.
2. If you are evaluating access to ECCC financing: Account approval is a green light. It is a good time to review open calls and prepare your application.
3. If you are an advisor or consultant: Inform your clients in the technology and cybersecurity sector that the ECCC maintains full operability and that European financing opportunities in this area remain in force.
4. If you have no links to the ECCC: No action is necessary. This decision does not generate obligations for private operators outside the body.

Official source

Consult full regulation on official source

Disclaimer: This article is purely informative in nature and does not constitute legal advice. For specific decisions, consult a qualified professional. Source: https://eur-lex.europa.eu/./legal-content/AUTO/?uri=OJ:L_202601674