The Cyber Resilience Act, a landmark piece of legislation, entered into force. This marks a major leap forward in the EU’s efforts to protect its citizens and businesses from cyber threats.
The Cyber Resilience Act (CRA) is the first-ever EU legislation placing mandatory cybersecurity requirements for products that include digital elements.
The Act introduces greater responsibilities on manufacturers to guarantee the security of hardware and software products. Central to the Act are new obligations for manufacturers to provide software updates that fix security vulnerabilities and offer security support to consumers. By enhancing transparency on cyber risks and product security, the Act empowers consumers to make more informed choices about products available on the EU market.
Products will bear the CE marking to indicate that they comply with the regulation’s requirements. The main obligations of the Act will apply from 11 December 2027.
The Cyber Resilience Act complements the NIS2 cybersecurity framework, which entered into force last year. It is part of a series of comprehensive measures the EU is deploying to bolster the cybersecurity of an increasingly digital and connected Europe.
Source: European Commission | Shaping Europe’s digital future (https://shorturl.at/A46aT)