The Cyber Resilience Act applies to all software and hardware products with digital elements that include a data connection to a device or network. However, it does not apply to products that are subject to other Union legislation as well as open-source software developed or supplied outside the course of a commercial activity.
The Cyber Resilience Act is expected to enter into force in 2024, and manufacturers must apply the rules 36 months after their entry into force. Following the application of the Act, the covered products may only be placed on the market if they meet their essential requirements laid down in the Act throughout their life cycle.
Insta’s experts can help your organization prepare for the requirements of the Cyber Resilience Act. You can submit a contact request with the form shown below.