The new Cyber Security Act allows the responsible minister to prohibit critical infrastructure operators from using designated foreign technology vendors, giving the Dutch government broader authority over suppliers in telecommunications, energy, logistics, and other essential sectors.