| Work Detail |
The Lithuanian Parliament has introduced significant legal measures to enhance the security of its renewable energy infrastructure. On November 17, 2024, a new law was adopted, adding Article 733, “Security Requirements for the Control Systems of Electricity Devices,” to the country’s legislation. This move aims to address risks associated with the remote controllability of photovoltaic (PV) inverters and other renewable energy systems.
The law mandates that electricity production and information management systems in solar and wind power plants, as well as energy storage devices with an installed capacity exceeding 100 kW, must meet strict security standards. These systems must ensure that entities from countries deemed a national security threat, as outlined in Lithuania’s National Security Strategy, cannot remotely access or control these devices. China is specifically included on this list. The legislation prohibits grid operators from connecting such devices to the electricity grid if their control systems do not comply with these requirements. This includes managing power change parameters or switching devices on or off remotely.
The law will take effect on May 1, 2025. Existing solar and wind power plants, as well as energy storage facilities, are required to meet these security standards by May 1, 2026. The transition period will allow time for necessary updates to information management systems.
The European Solar Manufacturing Council (ESMC) has welcomed these changes, emphasizing the importance of protecting information management systems from remote controllability risks. ESMC has also expressed hope that similar measures will be adopted across other EU Member States. Applying resilience criteria under the Net-Zero Industry Act (NZIA) to all renewable energy systems, regardless of capacity, is seen as a critical step toward safeguarding Europe’s energy infrastructure. |
