A part that used to be a line item on a bill of materials is now a national security question, and Romania has more money riding on the answer than almost anywhere else in the EU.
What Brussels actually did
Since April 2026, the European Commission has been rolling out a funding ban that blocks EU financing for solar and storage projects using inverters and battery power conversion systems made by companies from “high-risk” countries, named as China, Russia, Iran, and North Korea. The restriction applies across essentially every EU funding channel: the European Investment Bank, the European Investment Fund, the European Bank for Reconstruction and Development, the Modernisation Fund, and both direct and indirect EU financing instruments. On May 1, 2026, the ban was formally extended to cover power conversion systems in battery energy storage projects, with a request-for-grandfathering deadline of September 1 and an approval deadline of November 1 for projects already underway. From April 1, 2027, new contracts must fully incorporate the restrictions, with only limited derogations on political or security grounds.
This sits alongside a broader Cybersecurity Act revision the Commission put forward in January 2026, which proposes a formal “high-risk vendor” list for critical infrastructure equipment, modeled on the EU’s 5G security toolbox. Roughly 80 percent of imported PV inverters in Europe are Chinese-made, and EU officials have described inverters as the “brain” of the electricity network: the component that converts and regulates power from solar and storage assets and, if compromised, could in theory be manipulated remotely. The Commission has pointed to coordinated cyberattacks on Polish energy infrastructure in December 2025 as part of the justification, and officials have said worst-case scenarios could “undermine European energy infrastructure, potentially even triggering blackouts.”
The numbers behind the headline
Wood Mackenzie estimates the ban will touch about 14 percent of European solar demand through 2030, more than 28 GWdc of inverter capacity, and around 12 percent of planned EU battery storage deployment. The cost of switching to non-high-risk suppliers, Japanese, South Korean, Swiss, American, or European manufacturers such as SMA Solar and Fronius, is estimated at under 2 percent for large-scale solar and up to 8 percent for some storage segments, since inverters and PCS represent only a small share of total project cost. The geography of exposure is not evenly spread. Wood Mackenzie names Romania, Bulgaria, the Baltic states, and Greece as the most exposed markets in Europe, precisely because these are the countries where renewable and storage pipelines lean most heavily on EU financing rather than pure private capital.
That description fits Romania closely. The country has committed roughly EUR 80 million of Recovery and Resilience Facility (PNRR) funding expected to underwrite around 1.8 GW of storage contracts, plus EUR 300 million from the Modernisation Fund targeting at least 3 GW more, part of a national push toward 5 GW of installed storage by the end of 2026. Romania was also named among the beneficiary countries in the Commission’s EUR 1.8 billion Modernisation Fund disbursement round announced in January 2026. In short, a meaningful share of the funded pipeline Romania is counting on to hit its storage and solar targets runs directly through the instruments now subject to the new restriction.
Industry pushback, and why it matters for procurement
The Central and Eastern European Clean Energy Industry Alliance has warned the Commission directly that the restriction could delay deployment across the region. Its core argument: EU inverter and PCS manufacturing capacity sits around 82 GW a year, well short of the roughly 120 GW needed annually to meet climate targets, and battery storage in particular has limited non-Chinese PCS supply. Swapping suppliers mid-project, the alliance notes, is not a simple substitution: it can trigger electrical redesign, new grid-code compliance studies, revised commissioning schedules, renegotiated EPC contracts, and knock-on risk to grid connection deadlines and existing PPAs. The alliance has proposed supplier-neutral cybersecurity certification instead of origin-based bans, alongside transition protection for advanced-stage projects through 2030.
Whatever the final policy shape, the practical implication for developers, EPC contractors, and lenders is the same: supplier eligibility can no longer be confirmed once, late, or by default. It needs to be built into procurement from financial close, not bolted on at commissioning. That means earlier engagement with lenders on which suppliers qualify as bankable, active tracking of the grandfathering deadlines for projects already in construction, contractual flexibility to swap inverter or PCS suppliers without reopening the whole EPC agreement, and, where storage is involved, treating battery cells and modules (not currently restricted) separately from PCS sourcing (which is).
The caveats worth naming
The broader high-risk vendor list under the Cybersecurity Act revision still needs approval from the European Parliament and Council, and how individual member states implement it, including whether they extend the restriction to nationally funded projects as the Commission has requested, remains unresolved. Industry groups, including the China Chamber of Commerce to the EU, have pushed back hard, arguing the approach risks over-securitizing ordinary commercial technology. And the grandfathering and derogation mechanisms mean advanced-stage projects are not automatically caught out. None of that changes the direction of travel, but it does mean procurement teams are planning against a moving target for at least the next reporting cycle.
Momentum Energy’s View
We read Romania’s position here as genuinely double-edged, and the evidence supports saying so plainly. It is one of the most exposed markets in Europe precisely because its funded pipeline is real and substantial, not because the sector is behind. That is a meaningfully different problem to have than a market with no pipeline to protect. The developers, EPCs, and lenders who move first, mapping supplier eligibility against every funding source in a project’s stack, building contractual flexibility into EPC agreements, and treating cybersecurity certification as a bankability criterion rather than an afterthought, will be the ones who keep Romania’s storage and solar targets on schedule while slower-moving competitors renegotiate contracts mid-build. The country’s scale of EU-funded ambition is the reason this matters here more than almost anywhere else in the region, and it is also the reason getting procurement strategy right here is worth the effort.
