European Union: Cyber Resilience Act Introduces Mandatory Cybersecurity Requirements for Digital Products

The European Union has published Regulation (EU) 2024/2847, the Cyber Resilience Act, establishing horizontal cybersecurity requirements for products with digital elements. In the final text, it’s stated that “this Regulation should apply from 11 December 2027, with exception of the reporting obligations concerning actively exploited vulnerabilities and severe incidents having an impact on the security […]