Cyber Resilience Act
European Union
Products with digital elements need cybersecurity across their full lifecycle. Reporting duties for actively exploited vulnerabilities apply first.
Regulation (EU) 2024/2847. Full application from 11 December 2027.








