The CRA blog
What the Cyber Resilience Act requires, when it starts to apply and how its requirements can be met.
-
Reporting obligations from 11 September 2026
The Cyber Resilience Act does not start applying all at once. The first part that really reaches companies is the reporting obligations in Article 14, and they apply from 11 September 2026.
Read the post: Reporting obligations from 11 September 2026
The posts in this blog are for orientation and do not constitute legal advice. The wording of Regulation (EU) 2024/2847 prevails.