Article
The EU Cyber Resilience Act’s Reporting Started Last Friday, September 11. Here’s A Very, Very Brief Primer
The EU Cyber Resilience Act introduces mandatory cybersecurity requirements for products with digital elements sold in the European market, establishing a comprehensive framework for hardware and software security. Starting September 11, 2026, manufacturers face new reporting obligations for actively exploited vulnerabilities and severe security incidents, with strict timelines ranging from 24 hours to one month depending on the type of report.
Seyfarth Shaw LLP