The European Commission has yet to launch a long-awaited probe into cybersecurity risks in the solar panel supply chain, even as panels with potentially suspicious Chinese components continue to enter EU ports.
In March, the Commission said it would investigate risks associated with solar panel inverters, which convert photovoltaic (PV) energy into usable electricity and connect it to the grid. The concern is that these could be accessed remotely by hostile actors.
In May, Reuters reported on the presence of suspicious Chinese components in solar panels installed in the US, adding to concerns. However, with Brussels heading into its summer break, no investigation has yet been launched, let alone any findings presented.
“No risk assessment has started,” a Commission spokesperson told Euractiv. The spokesperson added that an investigation could start soon, but provided no timeline.
The delay comes amid warnings from the industry that critical amounts of Chinese hardware have already been installed across Europe. More than ten companies could have access to over three gigawatts (GW) of solar capacity – a level experts say could threaten grid stability and lead to blackouts if compromised.
“It’s crucial that we have an EU-level risk assessment sooner rather than later,” said Jan Osenberg, who is in charge of system integration at the SolarPower Europe lobby group.
“Time is of the essence,” said Christoph Podewils, secretary-general at the European solar producer lobby group ESMC. He warned that around 200 GW of Chinese inverters that “are controlled via the Internet and regularly receive software updates, which can be used to install malicious code.”
Osenberg also called for “industry-specific regulations” to address these new risks. An “EU assessment is the next step in delivering that framework,” he added.
Meanwhile, a growing number of Chinese-linked inverters are being installed in Europe. The EU imported around 100 GW of potentially vulnerable panels in 2024 and is on track for similar levels this year.
(de)