CRA

EU Cyber Resilience Act · European Commission / European Parliament · Official site

EU regulation requiring cybersecurity-by-design for products with digital elements sold in the EU, entered into force December 2024. Vulnerability reporting obligations start September 2026; main product security obligations apply December 2027.

Timeline

No changes recorded yet.

Sources we monitor

• EC DG CONNECT — digital policy checked 43 minutes ago
• EUR-Lex Cellar SPARQL — amendment chain by CELEX checked 6 hours, 43 minutes ago
• Official Journal, L series — daily edition checked 18 hours, 12 minutes ago