Most of what the European Union does never makes headlines. It happens in working groups, in presidency progress reports, in general approaches adopted by councils of ministers that only specialists follow. This week in Brussels is one of those weeks — three separate council formations meeting, a clutch of technical dossiers moving forward — and yet the issues being worked through are anything but routine. Migration rules that took a decade to negotiate are eleven days from going live, with gaps still unfilled. Telecom and cybersecurity legislation is being pushed toward a general approach that could reshape how Europe manages its dependence on foreign technology vendors. And the legal status of more than four million Ukrainians living across EU member states is quietly being renegotiated under the pressure of a war with no end in sight.
Migration: the June 12 deadline and the countries that aren’t ready
The EU’s Pact on Migration and Asylum enters full legal application on June 12. That date was set two years ago when the Pact was adopted in May 2024, after years of fractious negotiations between member states who could not agree on almost anything — not burden-sharing, not border responsibility, not the conditions under which an asylum claim could be rejected before it was fully examined. The Pact was the attempt to settle all of those arguments through ten interlocking legislative acts, designed to work as a system. The theory was that if you fixed every piece simultaneously, the whole would function. The risk was that if any piece lagged, the interdependencies would fail.
That risk is now materialising in a specific way. The European Commission published its third and final progress report on May 8. The headline was “significant progress.” The detail was less reassuring. As of mid-April, only eleven member states reported being fully on track to connect to the new IT systems by June. Sixteen others said they expected to resolve their outstanding issues in time, with caveats. The Commission described the overall picture as “considerable progress” while noting that “continuous efforts are needed” — which is Brussels language for: several countries are behind and we cannot force them to accelerate.
The specific gaps are documented. Germany still lacks the resources for the initial screenings that the Pact requires at the border — including mandatory health checks — and must resolve the shortfall in the next eleven days. Greece, Bulgaria and Italy, the three countries that register the highest numbers of irregular border crossings according to Frontex, lack reception capacity. Hungary is the only member state that has not submitted an emergency management plan to the European Union Agency for Asylum, and has not integrated the required capacity-building systems. The Commission has €3 billion allocated to support the Pact’s implementation; it cannot compel the countries where the problems are most acute to use it effectively in less than two weeks.
Home affairs ministers, meeting in Brussels this week, will discuss the overall state of the Schengen area against this backdrop. The picture there is also mixed. The Schengen Barometer presented in March showed irregular border crossings fell to around 180,000 in 2025, down 25% from 2024. That decline is real. But ten member states are still running internal border controls — checks between Schengen countries that are supposed to be free of them — and the political pressure on governments to maintain or expand those checks has not abated. Slovakia has long argued they are ineffective, pointing out that people cross internal borders regardless of whether inspections are happening; the more common view, in governments facing domestic pressure from the right, is that the checks are visible and politically useful regardless of their practical effect.
The Ukrainians: 4.2 million people, a status that expires next March
The meeting this week will also address what the Council agenda describes as “the future legal status of displaced persons from Ukraine.” The phrasing is careful. The reality it covers is stark.
Since Russia’s full-scale invasion in February 2022, the EU activated its Temporary Protection Directive for the first time in its history. The mechanism was designed for mass displacement events — it was written after the Balkan wars — and it worked, in the sense that it absorbed an unprecedented movement of people quickly and without collapsing national asylum systems. At peak, it provided protection to roughly 4.3 million Ukrainians across EU member states, giving them the right to reside, work, study, and access healthcare and social support. The directive was explicitly designed as a short-to-medium-term emergency measure.
Temporary protection was extended to March 2027. After that, there is no automatic continuation. The Commission has proposed a transition: member states should guide displaced Ukrainians toward national residence permits — for employment, education, family reasons — or toward return, once conditions allow. The framework looks orderly on paper. The European Policy Centre’s analysis, published last year, is blunter about the reality: “This proposal could lead to fragmentation and onward movements, reigniting tensions among member states.” The problem is that national residence permits differ enormously from one member state to another — in conditions, in access to services, in renewal processes — and some member states have been more cautious than others about offering long-term security to a population whose ultimate destination remains uncertain.
The underlying political tension is one that ministers will not resolve this week, because it cannot be resolved this week. As long as the war continues, most displaced Ukrainians cannot safely return. As long as they cannot return, the EU faces the question of whether a population of 4.2 million people should be integrated more formally into the legal structures of the countries where they currently live — with all the political and fiscal implications that brings — or kept in a holding pattern that suits the logic of an emergency but strains the reality of a multi-year situation.
Telecom ministers: wallets, supply chains, and the sovereignty question
The Telecom Council, also meeting this week, has a shorter but pointed agenda. The main item is a general approach on the European Business Wallet — a regulation that would give companies a standardised digital identity across the EU, allowing them to complete cross-border compliance procedures, submit regulatory documentation, and interact with public administrations through a single verified profile. The Business Wallet fits within the same digital identity architecture as the individual EU Digital Identity Wallet, which member states are legally obliged to provide to all citizens by the end of 2026 under eIDAS 2.0. Getting businesses into an equivalent system is the next step. BusinessEurope, the main EU business lobbying organisation, put out a position paper in April backing the concept while pushing back on the risk of disproportionate identity assurance requirements — in plain terms, asking the Commission not to make the verification process so burdensome that it defeats the purpose of simplification.
The more charged agenda item is the progress report on the Digital Networks Act and the revised Cybersecurity Act. These two pieces of legislation were proposed together in January 2026, and they are deliberately linked. The DNA rewrites the entire EU telecom regulatory framework — consolidating four existing legal instruments into a single directly applicable regulation, with new rules on fibre transition, spectrum management, satellite authorisations, and infrastructure resilience. The Cybersecurity Act 2.0 updates the 2019 framework with stronger supply chain security requirements.
The linkage between the two is the mechanism that makes telecom industry lawyers nervous. Under the DNA, access to spectrum and general authorisations to operate in the EU market are conditional on compliance with cybersecurity rules, including the supply chain security requirements in the revised Cybersecurity Act. What that means in practice: a telecom operator or digital infrastructure provider whose supply chain includes components or systems that do not meet EU cybersecurity standards — including standards that the Commission has the authority to set through delegated acts — could lose its operating authorisation. The CSA 2.0 does not name specific vendors. It sets criteria. But the criteria, and who meets them, will be determined through processes that the Commission and member state cybersecurity authorities control.
The ministers are not voting on these texts this week. They are receiving progress reports and exchanging views on “technological sovereignty” — the framing that has become standard in EU digital policy discussions, meaning the question of how much of Europe’s critical digital infrastructure can be controlled or disrupted by actors outside the EU’s regulatory reach. It is a legitimate question, and one that the Middle East energy crisis has given new urgency. But sovereignty in digital infrastructure is considerably more complicated than sovereignty over a pipeline, because the interdependencies are less visible and the alternatives take much longer to build.
The common thread
The three dossiers on the table this week — migration, Ukrainian displacement, and digital infrastructure — are usually discussed separately because they involve different ministries, different legal instruments, and different constituencies. But they share a structural characteristic that is worth naming.
All three involve the EU managing long-running consequences of decisions made under pressure, against deadlines set before the full complexity of the situation was apparent. The Migration Pact was negotiated during a period of political urgency and is now meeting the friction of implementation. Temporary protection for Ukrainians was a brilliant improvisation in 2022 and is now a political problem deferred to 2027. The DNA and CSA 2.0 are the EU’s attempt to retrofit sovereignty onto a digital infrastructure that was built, over twenty years, without much thought about where the components came from.
None of these problems will be resolved in a week of Council meetings. What the meetings do is keep the machinery moving, test where the consensus is and where it isn’t, and push the more difficult decisions toward a later date when someone else may be at the table. That is, most of the time, how European legislation works. The question is whether the later date is before or after the deadline.
June 12 is eleven days away.
Subscribe to EuroLuminant for independent European journalism.
