EU Cyber Resilience Act to mandate security for connected devices

The EU Cyber Resilience Act, adopted in late 2024, will require manufacturers of connected products to ensure baseline cybersecurity, shifting liability from users to producers. The regulation phases in progressively, with implications for product compliance and market access. This marks a regulatory shift in the EU's approach to IoT security, though implementation details and enforcement timelines remain to be clarified.