China has threatened to retaliate against the European Union if a new cybersecurity law leads to the exclusion of Chinese firms, including Huawei and ZTE, from European critical infrastructure. The draft Cybersecurity Act, which would make vendor removal mandatory for the first time, could trigger reciprocal measures against European companies in China. The Chinese Ministry of Commerce has submitted a 30-page document to the European Commission, warning that Beijing is prepared to invoke its Foreign Trade Law and State Council Supply Chain Security Regulations, which allow China to restrict trade, investigate foreign entities, and impose reciprocal bans on European companies. The revised EU CyberSecurity Act represents a significant shift in how Brussels approaches network security. It would require member states to remove equipment from vendors designated as high-risk suppliers from communications networks within three years of the law entering into force.