European mobile operators face a bill of up to €40 billion to rip out and replace equipment from Chinese suppliers like Huawei and ZTE under a proposed EU cybersecurity law, and a chunk of that cost may land on consumers through higher bills or slower 5G rollouts. The estimate, tucked inside a new GSMA Intelligence study based on data from seven major operator groups, lands just as Brussels pushes for enforceable, EU-wide restrictions on high-risk vendors in critical digital infrastructure.

That sticker shock isn’t just a boardroom problem. It raises immediate questions for anyone who relies on a mobile phone, home broadband, or business connectivity: Will my service get more expensive? Could my 5G coverage degrade? And what happens to the promised fiber upgrades in my area? This guide unpacks the proposal, the price tag, and what it means for European consumers and businesses.

The proposal that triggered the €40 billion warning

The draft legislation is the Cybersecurity Act 2, or CSA2. Unlike the earlier voluntary 5G security toolbox, which let national governments decide how aggressively to restrict high-risk vendors, CSA2 gives the European Commission teeth. It creates a mechanism to designate entire supplier categories as high-risk, identify “key ICT assets” across mobile, fixed, and transport networks, and then impose measures ranging from tighter auditing all the way to forced removal of installed equipment.

The most eye-catching detail is a proposed three-year deadline for mobile operators to remove targeted equipment from their 5G networks. Other infrastructure types might get different timelines, but the clock starts ticking once implementing acts are adopted. The legal text, published on EUR-Lex, also allows operators to seek exemptions if they can prove that non-technical risks—like foreign government interference—have been neutralized through effective safeguards. That nuance is important, but for now, the headline threat is a hard-phase-out mandate.

The numbers behind the alarm

The GSMA Intelligence report, first reported by The Register, breaks down the direct replacement cost identikit style:

  • Mobile networks: €19 billion
  • Fixed broadband and core infrastructure: €5 billion
  • Transport networks (optical backbones, subsea cables, etc.): €11 billion

These estimates cover the actual equipment swap, but they don’t capture the full financial earthquake. Banning key suppliers also reshapes the telecom equipment market. With fewer vendors competing for tenders, prices are expected to rise. GSMA Intelligence calculates that reduced competition could inflate costs by:

  • 24% for mobile network gear
  • Up to 19% for fixed-network equipment
  • Around 10% for transport kit

Between 2027 and 2030, that second-order effect could slap operators with an extra €8.5 billion in procurement costs, according to the study. That’s not a one-off; it’s a structural price increase that would echo through every future network upgrade.

What the price tag means for you

For the average smartphone user, the math is indirect but real. If an operator must spend billions on compliance, it has less capital for expanding coverage, densifying urban cells, or pushing fiber deeper into rural areas. That can translate into:

  • Higher monthly plans: When margins shrink, consumer prices often rise. The GSMA warns that operators might “increase access charges for customers” to recover costs.
  • Slower 5G and fiber rollouts: Capital diverted to replacement is capital not spent on new sites. Regions still waiting for 5G or gigabit broadband could see timetables stretch.
  • Reduced competition in some markets: Smaller operators with tighter balance sheets may postpone investments or merge, potentially leaving consumers with fewer choices.

For businesses, the stakes are steeper. Enterprise mobile contracts, private 5G networks, and dedicated fiber links could face both higher tariffs and delayed delivery. An industrial firm planning a factory automation project reliant on ultra-low-latency 5G might find that the private network build gets pushed out by two years because the operator’s engineers are tied up in rip-and-replace work. Similarly, a cloud-first SME could see its broadband costs tick up just as bandwidth demand rises.

IT administrators managing company-wide telecom spend may need to bake these potential increases into 2027–2030 budgets now. While the proposal targets carrier infrastructure, the bill inevitably trickles down. Early conversations with account managers and a review of multi-year contracts could be prudent.

How Europe reached this junction

The policy didn’t materialize overnight. In 2020, the EU introduced its 5G cybersecurity toolbox, urging members to restrict high-risk suppliers in critical network functions. Several countries, including Sweden and the UK, moved to ban Huawei from 5G rollouts. The European Commission later identified Huawei and ZTE as presenting materially higher risks than other suppliers, citing concerns over potential coercion, espionage, and supply-chain disruption linked to China’s legal framework.

Washington’s aggressive sanctions on Huawei accelerated the technology freeze. The UK’s 2020 decision to force removal by end-2027—at a government-estimated cost of £2 billion—offered a real-world preview. UK operators lost valuable time and money, and the country’s 5G performance now lags behind many European peers. Crucially, Westminster never provided a dedicated funding pot for the swap. Operators bore the cost alone, and consumers are feeling the service-quality pinch.

Brussels now faces a similar dilemma, but at a continental scale. The EU’s internal market is far more fragmented, with hundreds of operators and varying levels of dependency on Chinese equipment. Some member states, like Germany, had deeply integrated Huawei into 5G; a broad mandate would hit them hardest.

What you can do right now

For consumers: There is no immediate action to take on your phone bill, but awareness can inform decisions. If you’re nearing the end of a contract, locking in a longer-term plan at current prices might protect against future hikes. Keep an eye on operator announcements—any mention of “regulatory cost pressure” in investor calls is a red flag. Also, support consumer advocacy groups that engage with telecom policy; your voice can help push for transitional funding or phased rollouts that soften the blow.

For businesses: Start modeling two scenarios for your telecom spend: one where prices stay flat, and one with a 5–10% annual uplift from 2028 onward. Engage your service providers early. Ask how reliant their equipment supply chains are on designated high-risk vendors and whether they have a migration timeline. If you’re in a multi-year private 5G or SD-WAN negotiation, build in clauses that cap price escalation linked to regulatory compliance costs.

For IT architects and network managers: If your company operates its own private LTE/5G network or extensive fixed infrastructure, audit your equipment inventory for Chinese-origin gear. While the CSA2 primarily targets public networks, the legislation’s scope could extend to “critical” private networks in sectors like energy or transport. Begin identifying alternative vendors and testing interoperability now, even if no immediate mandate exists.

Collectively, the biggest lever is advocacy. Industry associations like ETNO and the GSMA are already lobbying for longer transition periods, direct funding, and risk-based rather than blanket bans. If your organization belongs to any such group, push them to demand a transparent, cost-assessed implementation framework. The EU’s own proposal includes a requirement to assess economic and societal impacts before finalizing restrictive measures—use that opening.

What to watch next

The Commission’s proposal is just the starting gun. It must now wind through the European Parliament and Council, where member states with high Huawei exposure will fight for flexibility. Expect amendments that stretch deadlines, narrow the definition of “key assets,” or create a reimbursement fund. The final shape of CSA2 will likely emerge only in 2027 or 2028, but the preparatory engineering and financial planning in operator boardrooms is already underway. Watch for national regulators issuing preliminary guidance, and for any EU-level statements on cost-sharing. The debate over who pays—operators, governments, or consumers—is far from settled, and the answer will determine whether Europe strengthens its networks without weakening its wallet.