Skip to content

Cyber Resilience Act

What is the Cyber Resilience Act?

LAST REVIEWED

It is a horizontal regulation: it applies across sectors to hardware and software products with a direct or indirect data connection, rather than to a single industry. Conformity is demonstrated through CE marking, in the same legal pattern as other EU product legislation.

  • Entered into force 10 December 2024.
  • Reporting obligations apply from 11 September 2026.
  • Main obligations, conformity assessment and CE marking apply from 11 December 2027.

Want this answered for your product?

The scope checker gives you a documented read in a few minutes, including a full PDF.