EU Cyber Resilience Act to Enforce New Reporting Requirements

Summary

The EU Cyber Resilience Act (CRA) enforcement begins, requiring businesses to report serious product security incidents to government authorities within 24 hours. This represents a significant tightening of incident disclosure timelines across the EU, affecting manufacturers, importers, and distributors of connected products. The regulation aims to improve transparency and enable faster coordinated response to emerging threats.

Entities