European Union: Adopted Cyber Resilience Act by the Council of the EU including cybersecurity requirements for products with digital elements
Description
Adopted Cyber Resilience Act by the Council of the EU including cybersecurity requirements for products with digital elements
On 10 October 2024, the Council of the EU adopted the regulation on Cybersecurity Requirements for Products with Digital Elements (Cyber Resilience Act), which aims to establish mandatory cybersecurity requirements for products with digital components, such as connected home cameras, smart fridges, TVs, and toys. The Act outlines safety requirements that products have to meet before they enter the market. The Act will apply to all products connected to other devices or networks, except for those already covered by existing EU rules on cybersecurity, such as medical devices, aviation, or cars. Furthermore, the Act includes measures holding manufacturers responsible for compliance with security requirements, vulnerability handling processes, transparency for consumers and business users, and market surveillance. In addition, the Act includes amendments regarding the scope of the legislation, reporting obligations, determination of product lifetime, support for small and micro enterprises, and a simplified declaration of conformity. The Act will enter into force after twenty days following its publication and will enter into force after 36 months.
Original source