We analyse the complexities of the European cybersecurity framework and discuss where the impacts of regulation are being felt.