European Union: Adopted cybersecurity regulation in General Product Safety Regulation (GPSR)

On 25 April 2023, the Council adopted the new General Product Safety Regulation (GPSR), which establishes a wide-ranging legal framework for ensuring the safety of non-food consumer products – items designed for consumer use or those reasonably expected to be used by consumers. Its specific focus is to address safety challenges stemming from novel technologies and the landscape of online selling. Embedded within the GPSR are provisions for cybersecurity regulation. During the evaluation of a product's safety, particular attention shall be given to the following factors: when necessitated by the product's nature, the appropriate cybersecurity features essential to shield the product from external influences, including malicious third parties, which could impact the product's safety, even leading to potential loss of interconnectivity.