Cyber Resilience Act

Published on Nov 20, 2024

The Cyber Resilience Regulation —Regulation (EU) 2024/2847 of the European Parliament and of the Council— was published today in the Official Journal of the European Union (OJEU), thereby concluding the legislative process for approving this regulation, which has been ongoing since mid-2022 following the European Commission’s proposal.

Key Aspects

  • - Manufacturers must integrate security measures from the design phase and ensure CE marking;
  • - Importers and distributors are responsible for verifying product cybersecurity standards;
  • - Timely reporting of vulnerabilities and incidents is mandatory for manufacturers;
  • - Significant penalties are imposed for noncompliance, with exemptions for small enterprises.

View document