If you make or sell digital products in the EU, you must now report all exploited vulnerabilities and “severe” incidents that impact their security within 24 hours of becoming aware of them. These rules apply to every sector that produces products with a digital element – from baby monitors to smart watches and apps.

The reporting obligations under the EU Cyber Resilience Act (CRA) came into force on Sept. 11. Non-EU businesses must also comply if they manufacture, import, or distribute relevant products in the EU.

Learn More
Already a member? Sign in to an existing account.

Ruth Prickett graduated from Cambridge University with a BA hons in History and has specialized in business and finance journalism for the past 20 years. She was editor of Financial Management, the magazine...