10/12/2024 (Agence Europe) – The Cyber Resilience Act (CRA) officially came into force on Tuesday 10 December. The CRA is designed to eliminate “vulnerabilities” in products with digital functionalities (such as connected home cameras, fridges, televisions and toys) by introducing mandatory cyber security requirements for their design, development, production and availability. Manufacturers are legally obliged to provide software updates that correct detected vulnerabilities, in order to make it more difficult for their products to be hacked. The cyber resilience regulation complements the ‘NIS2’ cyber security framework, which came into force last year (see EUROPE 13506/11). The main obligations of the regulation will apply from 11 December 2027. (IS)