This story has been updated. Please see the most recent update below. The Council of the European Union announced, on November 30, 2023, that it had reached a provisional agreement with the European Parliament on the proposal for a Cyber Resilience Act, released by the European Commission in September 2022. The Cyber Resilience Act seeks to introduce mandatory cybersecurity requirements for products with digital elements, throughout their whole lifecycle, with the aim to ensure that products such as connected home cameras, fridges, TVs, and toys are safe before they are placed on the market. The provisional agreement was welcomed by the European Consumer Organisation (BEUC), which issued a p
News
EU: Council and Parliament reach provisional agreement of Cyber Resilience Act
December 10, 2024
Summary
The EU Cyber Resilience Act, agreed provisionally on November 30, 2023, introduces mandatory cybersecurity requirements for products with digital elements, aiming to ensure consumer safety. The agreement maintains the Commission's focus, assigning compliance responsibility to manufacturers and establishing a market surveillance framework. Amendments include a simplified product classification, a minimum five-year support period from manufacturers, and reporting obligations for vulnerabilities. The Act was published on November 20, 2024, will enter into force on December 10, 2024, and become applicable on December 11, 2027, with reporting obligations starting September 11, 2026.