EU Cyber Resilience Act: 72-hour reporting window called 'illusion' by expert

The EU's Cyber Resilience Act introduces mandatory incident reporting for digital products, with a 72-hour notification requirement. Expert Marko Gulan argues this timeline is unrealistic given typical detection and assessment delays. The regulation imposes new compliance burdens on the tech sector, potentially affecting product development and market access.