Cyber Resilience Act - A brief overview to when, who and what
The EU Cyber Resilience Act (CRA) came into force on 10th December 2024, with a 36 month period permitted for its previsions to be implemented. We are now roughly halfway through that implementation period, so time is getting short to ensure product compliance. The obligation to report “severe incidents and security breaches” starts even sooner, being required from September 10th this year.












