Share on LinkedInShare on LinkedIn

ARTICLE · 25 SEPTEMBER 2026

Ready, respond, report: the Cyber Resilience Act’s reporting regime is here

CMS Wistrand
CMS Wistrand
Contributor
CMS Wistrand

CMS Wistrand

CMS Wistrand is a Future Facing firm. With a deep local market understanding combined with a global...

View firm profile
Explore more from CMS Wistrand

The EU's Cyber Resilience Act introduces mandatory vulnerability and incident reporting obligations for manufacturers of digital products starting 11 September 2026, well before the broader regulatory framework takes effect. Manufacturers must navigate tight reporting deadlines, determine when they become "aware" of security events, and establish governance structures to comply with 24-hour early warnings and subsequent detailed notifications through a platform that is not yet operational.

AfghanistanTechnology
Tom De Cordier
Tom De Cordier
Thomas Dubuisson
Thomas Dubuisson

The reporting obligations included in Regulation (EU) 2024/2847 on horizontal cybersecurity requirements for products with digital elements (the Cyber Resilience Act or CRA), enter into application on 11 September 2026 with the broader CRA framework entering into application on 11 December 2027.

The CRA is an EU regulation that establishes mandatory cybersecurity requirements for certain products with digital elements placed on the EU market. These reporting obligations apply to certain vulnerabilities and incidents affecting product security.

CRA reporting regime applies from Friday, 11 September

As of 11 September 2026, the CRA’s vulnerability and incident reporting regime applies to manufacturers of relevant products with digital elements placed on the EU market, including relevant products that were already placed on the EU market before that date.

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

Register for freeORLog in

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

View source

Related Articles

Legal Intelligence Newsletters: sign up for the latest legal and regulatory news on your chosen topics

Read more about

Related Comparative Guides

See more popular content from

Article

EU AI Act: The Latest Compliance Checkpoint

The EU AI Act's transparency obligations became enforceable on 2 August 2026, requiring providers and deployers of AI systems to clearly disclose AI-generated content, inform users of AI interactions, and label deepfakes. Organizations must now navigate new compliance requirements including disclosure obligations for emotion recognition systems and content on matters of public interest, while facing potential fines of up to €15 million or 3% of global turnover for non-compliance.
European UnionTechnology
WH Partners
WH Partners
Article

AI Shopping Agents: Customer Gains, Retailer Gains, And What Retailers Stand To Lose

Amazon's Buy for Me and other AI shopping agents are fundamentally reshaping retail by inserting themselves between customers and brands, threatening to reduce retailers to mere fulfillment providers. As discovery, evaluation, and checkout shift into agent channels, retailers must act quickly on six critical imperatives or risk losing direct customer relationships and becoming invisible in their own categories.
AfghanistanTechnology
AlixPartners Asia LLC
AlixPartners Asia LLC
Article

LNG Charterparty Hire Formula: Meaning Of JKM–TTF Pricing Spread

The Commercial Court ruled on a USD 29 million dispute over an LNG carrier charterparty's index-linked pricing formula, determining whether the "JKM-TTF spread" operated bidirectionally or only when JKM exceeded TTF. The decision examines how unprecedented market conditions—where European gas prices surged above Asian prices due to the Ukraine war—tested the contractual formula's application and whether rectification could remedy an alleged drafting oversight.
European UnionLitigation, Mediation & Arbitration
CMS Wistrand
CMS Wistrand
Article

The European Union And Austria’s Hydrogen Push: Strict Rules, But New Momentum

The European Union's hydrogen market faces a critical juncture as policymakers balance ambitious renewable energy targets with complex regulatory frameworks that have slowed investment. Recent policy signals from Brussels and Vienna indicate a strategic recalibration—the EU Commission has announced a targeted review of RFNBO production criteria while simultaneously launching new funding mechanisms and infrastructure initiatives.
European UnionEnergy and Natural Resources
CMS Wistrand
CMS Wistrand