Dutch Regulator Flags EU Cyber Gaps for Cloud-Controlled Home Batteries
The Netherlands' digital infrastructure inspectorate, Rijksinspectie Digitale Infrastructuur, has issued a stark warning regarding cybersecurity vulnerabilities in cloud-controlled home batteries and smart energy devices. The regulator highlighted that cyberattacks or faulty backend updates controlling home batteries, inverters, heat pumps, and EV chargers could trigger a grid imbalance of 3 GW or more.
Identifying Regulatory Blind Spots
According to the inspectorate, current EU frameworks, specifically the Cyber Resilience Act (CRA) and the NIS2 directive, contain significant regulatory gaps. The NIS2 directive is currently based on company size rather than the remotely controlled capacity of the assets. This loophole leaves smaller companies and non-EU established entities that control substantial grid capacity entirely unregulated, posing a severe risk to European grid stability.
Proposed Regulatory Overhaul
To address these risks, the Dutch regulator proposes adding smart home devices to the CRA’s class II products list, which would mandate independent security assessments before these products can be sold in the EU market. Furthermore, they suggest amending NIS2 to bring any company that remotely controls enough capacity to endanger grid stability under its jurisdiction, regardless of the company's size or physical location.
Concurrently, a European Commission expert group has recommended classifying solar inverters as important class II products under the CRA. While the initial analysis focused on inverters, the group noted that EV chargers, heat pumps, and battery storage systems could be subjected to similar assessments in the near future.
These proposed regulatory changes underscore the growing recognition that as decentralized energy resources proliferate across the EU, cybersecurity must be treated as a fundamental component of grid reliability and national security.
Source: PV Magazine
This article was assisted by AI analysis. Please refer to the original source for official information.