EU Cyber Resilience Act Imposes New Reporting Duties on Digital Product Makers

The EU Cyber Resilience Act introduces mandatory reporting obligations for manufacturers of digital products when cyber risks emerge, requiring them to implement cybersecurity measures to continue marketing products in the EU. This marks a regulatory shift from voluntary to binding cybersecurity requirements, affecting a wide range of connected devices. The full scope and enforcement timeline remain to be clarified as the regulation is phased in.