Spain's Missing Blackout Plan: How the EU Enforces Grid Resilience, and Why the US Doesn't

Pravda reported in October 2026 that the European Commission had opened infringement proceedings against Spain for failing to submit its updated risk-preparedness plan for the electricity system ^[1]. The story itself was narrow: a compliance deadline missed, a formal notice sent. But the mechanism behind it tells a larger tale about how electricity grids are held accountable, and what happens when they are not.

Under EU Regulation 2019/941, every member state must file a risk-preparedness plan every four years, detailing measures to prevent and manage electrical crises caused by extreme weather, cyberattacks, fuel shortages, or other disruptions ^[2]. The plan must identify vulnerabilities, name concrete actions, and show how the country will minimize harm if the grid fails. It is, in effect, a contractual obligation between a state and the European Commission: you tell us how you will keep the lights on, and we will verify it. Spain, along with France and Belgium, had not filed ^[2]. The Commission sent formal notices. That was October 2026.

Three months earlier, on April 28, 2025, the Iberian Peninsula experienced a complete electrical blackout affecting 47 million people across Spain and Portugal ^[9]. Preliminary analysis suggested the event was not caused by a failure of renewable energy systems ^[8], but the outage nonetheless exposed a gap: Spain had no current, documented, Commission-reviewed plan for exactly the kind of cascading failure that had just occurred. The timing is not coincidental. The Commission likely accelerated the infringement after the blackout made the absence of a filed plan politically untenable.

The US electricity system has no equivalent obligation. NERC, the North American Electric Reliability Corporation, sets voluntary standards for operators and publishes annual assessments of reliability and resource adequacy. But no US utility or regional transmission operator must file a comprehensive, government-reviewed crisis-response plan with regulatory teeth. Instead, utilities publish voluntary compliance reports; regulators review them on a case-by-case basis; and enforcement depends on after-the-fact investigation of outages that have already occurred. The contrast is stark: the EU requires documented preparedness in advance; the US waits for failure and investigates after. One assumes accountability; the other assumes competence.

Spain's case also reveals a secondary gap in EU enforcement: the plan was due, but the Commission did not catch the miss until months after the blackout made it politically salient. That lag, between a deadline and enforcement action, is where compliance quietly dies in many regulatory regimes, including the US. A filing deadline is meaningless if no one checks it until the lights go out.