Article
EU Cyber Resilience Act: 24-Hour Reporting Duties Start September 11, 2026
The European Commission has issued guidance on the Cyber Resilience Act just weeks before manufacturers must begin reporting vulnerabilities and security incidents within 24 hours. With potential fines reaching €15 million or 2.5% of global turnover, companies need to understand their obligations under these new reporting requirements that take effect September 11, 2026.
Jones Day