European Union: Passed Cyber Resilience Act by the European Parliament including cybersecurity requirements for products with digital elements
Description
Passed Cyber Resilience Act by the European Parliament including cybersecurity requirements for products with digital elements
On 12 March 2024, the European Parliament adopted the text provisionally agreed on the regulation regarding Cybersecurity Requirements for Products with Digital Elements (Cyber Resilience Act), which aims to establish mandatory cybersecurity requirements for products with digital components, such as connected home cameras, smart fridges, TVs, and toys. The Act outlines safety requirements that products have to meet before they enter the market. The Act will apply to all products connected to other devices or networks, except for those already covered by existing EU rules on cybersecurity, such as medical devices, aviation, or cars. Furthermore, the Act includes measures holding manufacturers responsible for compliance with security requirements, vulnerability handling processes, transparency for consumers and business users, and market surveillance. In addition, the Act includes amendments regarding the scope of the legislation, reporting obligations, determination of product lifetime, support for small and micro enterprises, and a simplified declaration of conformity. The Act now goes to the Council for the final vote.
Original source