Article
Manufacturers Must Report Cyber Risks In Any EU Digital Products From September
The EU Cyber Resilience Act introduces mandatory incident reporting obligations that take effect in September 2026, requiring manufacturers of digital products to notify authorities within 24 hours of discovering actively exploited vulnerabilities or severe cybersecurity incidents. These requirements apply to products already on the market and operate independently of personal data breaches...
Womble Bond Dickinson