It's a sign of troubling times that it is now much less clear which jurisdictions this is targeted at.

(from https://digital-strategy.ec.europa.eu/en/library/proposal-regulation-eu-cybersecurity-act)