EU publishes guidance on new cybersecurity rules for connected devices
The European Commission has published guidance for manufacturers and regulators implementing the Cyber Resilience Act, the EU’s law on mandatory cybersecurity for digital devices and related services. In effect since December 2024, the law lays out the requirements for obtaining the CE mark for safe products. The guidelines come ahead of new CRA obligations taking effect this September to report and patch security vulnerabilities discovered in digital products. From December 2027 the remaining obligations t
