Log in or register
Share on LinkedInShare on LinkedIn

ARTICLE · 30 OCTOBER 2024

Cybersecurity Awareness Month: Navigate The Shifting Sands Of EU Cybersecurity Laws

Steptoe LLP
Steptoe LLP
Contributor
Steptoe LLP

Steptoe LLP

Steptoe International (UK) LLP has built a strong reputation for providing top-quality regulatory,...

View firm profile
Explore more from Steptoe LLP

Consistent with tradition, on the occasion of cybersecurity awareness month, we present some key European Union (EU) cybersecurity legislative and regulatory developments that businesses should be aware.

BelgiumTechnology
Anne-Gabrielle Haie
Anne-Gabrielle Haie
Maria Avramidou
Maria Avramidou

Consistent with tradition, on the occasion of cybersecurity awareness month, we present some key European Union (EU) cybersecurity legislative and regulatory developments that businesses should be aware of in order to devise and implement strong and legally compliant cybersecurity strategies.

Cyber Resilience Act

The Cyber Resilience Act (CRA) was adopted by the Council of the EU on October 10, 2024. The CRA requires that products with digital elements can only be made available on the EU market if they meet specific essential cybersecurity requirements. It applies to both tangible digital products, such as connected devices, and non-tangible digital products, such as software embedded in connected devices. The CRA excludes from its scope certain connected devices that are already covered by sectoral legislation (e.g., medical devices, motor vehicles and their trailers, civil aviation, marine equipment, etc.).

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

Register for freeORLog in

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

View source

Related Articles

Legal Intelligence Newsletters: sign up for the latest legal and regulatory news on your chosen topics

Read more about

Related Comparative Guides

See more popular content from

Article

Privacy, Cyber & Data Strategy Advisory | Connected Devices And Software: New EU Cyber Incident Reporting Rules Take Effect

The EU Cyber Resilience Act's incident reporting obligations take effect on September 11, 2026, requiring manufacturers of connected devices and software to report certain vulnerabilities and cybersecurity incidents. This marks a critical milestone in EU cybersecurity regulation, introducing new compliance requirements for companies that may already face reporting obligations under other digital regulations.
European UnionTechnology
Alston & Bird LLP
Alston & Bird LLP
Article

When A Chatbot Becomes A Search Engine: Lessons From The Commission’s Latest DSA Designations

The European Commission has designated ChatGPT as a Very Large Online Search Engine under the Digital Services Act, marking the first time a generative AI assistant has been classified this way. This designation, alongside Reddit and Roblox being named as Very Large Online Platforms, introduces systemic risk assessment obligations, independent audits, and advertising transparency requirements that most AI products have not previously faced. What does this mean for other AI assistants with web-search capabil
BelgiumTechnology
Burges Salmon LLP
Burges Salmon LLP
Article

Digital Omnibus On AI: What Is Changing In The EU And What This Means For Your Compliance Strategy

The European Union has reached a provisional political agreement on amendments to the AI Act, introducing targeted changes aimed at reducing administrative burden while maintaining the regulatory framework's core architecture. The agreement extends compliance timelines for high-risk AI systems, strengthens governance through enhanced EU AI Office powers, and introduces new prohibited practices related to AI-generated content.
European UnionTechnology
Loyens & Loeff
Loyens & Loeff
Article

FCC Tightens Equipment Rules

The Federal Communications Commission has adopted sweeping new restrictions targeting equipment containing components from entities on its Covered List, fundamentally reshaping how manufacturers, online marketplaces, and equipment modifiers must approach FCC compliance. These rules establish unprecedented prohibitions on logic-bearing hardware components, impose strict display requirements for e-commerce platforms, and clarify when existing authorizations can support equipment modifications.
United StatesMedia, Telecoms, IT, Entertainment
Steptoe LLP
Steptoe LLP
Article

Weekly Sanctions Update: September 14, 2026

The Treasury Department intensifies economic pressure on Iran through Operation Economic Outcast, suspending aviation licenses and sanctioning dozens of entities while implementing a presumption of denial for Iran-related transactions. Meanwhile, new enforcement actions target Chinese cybercrime platforms, Ecuadorian terrorist organizations, and Israeli settlers, as Congress considers comprehensive Russia-Iran sanctions legislation.
GlobalGovernment, Public Sector
Steptoe LLP
Steptoe LLP
Article

Weekly Sanctions Update: September 21, 2026

The Lindsey O. Graham Sanctioning Russia and Iran Act of 2026 has become law, imposing sweeping sanctions on Russian officials, financial institutions, and shadow fleet vessels while authorizing tariffs up to 100 percent on major purchasers of Russian oil and natural gas. How will these new measures impact global trade relationships, particularly with China and India as the largest buyers of Russian crude?
GlobalGovernment, Public Sector
Steptoe LLP
Steptoe LLP
Article

The Analysts' Brief: The US-Russia Diesel Deal

The Trump administration's October 2025 diesel deal with Russia promises temporary sanctions relief to ease US fuel prices before midterm elections, but analysts question whether the limited supply will meaningfully impact global markets or represent a lasting shift in US-Russia relations. The agreement has already strained transatlantic partnerships and US-Ukraine cooperation while raising compliance uncertainties for businesses navigating evolving sanctions regimes.
GlobalGovernment, Public Sector
Steptoe LLP
Steptoe LLP
Article

Executive Order 14421: National Emergency Declaration Imposes New Restrictions On Foreign Bulk-Power System Equipment

President Trump's Executive Order 14421 declares a national emergency to secure the U.S. bulk-power system, imposing new restrictions on foreign-produced electric equipment that poses national security risks. The order prohibits certain imports and installations while directing the Department of Energy to identify and potentially replace existing vulnerable equipment already on the grid.
United StatesEnergy and Natural Resources
Steptoe LLP
Steptoe LLP