Log in or register
Share on LinkedInShare on LinkedIn

ARTICLE · 10 SEPTEMBER 2026

The Cyber Resilience Act

Monard law
Monard law
Contributor
Monard law

Monard law

With over 140 professionals, Monard Law is one of the biggest independent full-service business law...

View firm profile
Explore more from Monard law

The EU's Cyber Resilience Act introduces comprehensive cybersecurity requirements for connected devices and software sold in the European market. With key compliance deadlines approaching in 2026 and 2027, manufacturers, importers, and distributors must understand their obligations regarding security by design, vulnerability reporting, and lifecycle maintenance to avoid penalties and build customer trust.

European UnionMedia, Telecoms, IT, Entertainment
Dylan Verhulst
Dylan Verhulst
Jill Leen
Jill Leen
Kristof Zadora
Kristof Zadora

Nowadays, almost every digital device and digital application contains software and connectivity. From smartwatches to connected refrigerators, from business software to a smart thermostat – digital products are used everywhere in our daily lives. However, these products often constitute weak points in cybersecurity: security measures are often subordinate in the development process, resulting in vulnerabilities and outdated security practices (think of default passwords or lax update support). This creates unnecessary risks of cyber incidents, data breaches and economic damage.

Regulation (EU) 2024/2847, better known as the Cyber Resilience Act (hereinafter the ‘CRA’), addresses this issue as a product-regulating instrument and thus forms part of the broader EU Digital Strategy. For the first time, this new EU regulation imposes harmonised cybersecurity obligations on manufacturers of digital products in the EU. The aim of the regulation is to guarantee a basic level of

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

Register for freeORLog in

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

View source

Related Articles

Legal Intelligence Newsletters: sign up for the latest legal and regulatory news on your chosen topics

Read more about

Related Comparative Guides

See more popular content from

Article

EU Cybersecurity Act 2 Advances Amid Member States’ Concerns Over EU Competence

The European Union's revised Cybersecurity Act advances through legislative procedures while facing significant Member State concerns about EU competence limits in cybersecurity matters. The proposed framework would empower the European Commission to exclude high-risk suppliers from the EU market, but questions arise about whether the EU has authority to act in areas traditionally reserved for national security.
European UnionMedia, Telecoms, IT, Entertainment
Jones Day
Jones Day
Article

EU KIDS Act: 5 Things You Need To Know

The EU Commission has unveiled a comprehensive proposal for the EU KIDS Act, introducing graduated age restrictions on children's social media access and extensive design limitations for online services. If enacted, the regulation would prohibit children under 15 from opening social media accounts on platforms with "risky features," while imposing strict functionality requirements and age assurance obligations across the digital ecosystem.
European UnionMedia, Telecoms, IT, Entertainment
Slaughter and May
Slaughter and May
Article

Raising the bar: The European Broadcasting Union’s guidelines to prevent the sexualization of female athletes

The European Broadcasting Union has published detailed camera and editing standards designed to eliminate sexualizing portrayals of female athletes in live sports broadcasts. Developed in collaboration with European Athletics and Olympic athletes, these guidelines address long-standing concerns about inappropriate camera angles, slow-motion replays, and filming practices that distract from athletic performance. While currently voluntary recommendations, the framework could establish a precedent for binding
BelgiumMedia, Telecoms, IT, Entertainment
Gowling WLG
Gowling WLG
Article

How Organisations Can Comply With European Interoperability Rules For Data Sharing And Data Exchange

The European Union's data strategy introduces comprehensive interoperability obligations through the GDPR, Data Act, and Data Governance Act, fundamentally transforming how organizations handle data portability, switching between service providers, and data intermediation services. Organizations providing data processing services and those operating as data intermediaries face new compliance requirements, registration procedures, and operational standards that demand immediate attention and strategic implem
European UnionPrivacy
Monard law
Monard law
Article

Het nieuwe boek 7 Burgerlijk Wetboek is aangenomen: wat betekent dit voor de vastgoed- en bouwpraktijk?

Belgium's new Book 7 of the Civil Code introduces fundamental changes to real estate and construction law, reshaping risk allocation, conformity standards, and contractual relationships. With implementation set for September 2027, property developers, contractors, and real estate professionals face critical decisions about updating their standard documentation and contractual frameworks.
BelgiumReal Estate and Construction
Monard law
Monard law
Article

New European Regulations For Webshops: Will An Online Withdrawal Button Become Mandatory?

New EU regulations introduce mandatory online withdrawal functions for e-commerce, requiring companies to provide easily accessible, clearly labeled cancellation tools with two-step confirmation processes. Companies must verify their webshops comply with specific criteria including permanent availability throughout withdrawal periods and explicit confirmation buttons to prevent unintentional cancellations.
BelgiumConsumer Protection
Monard law
Monard law
Article

CJEU Judgment In The Jautiva Case

The Court of Justice of the European Union has ruled that Latvian legislation requiring unrestricted public access to shareholder information violates fundamental rights protections under the EU Charter. While the Court acknowledges the legitimacy of anti-money laundering, counter-terrorism, and sanctions objectives, it finds that these goals can be achieved through less intrusive measures that restrict access to competent authorities, obliged entities, and persons with legitimate interests. The judgment le
European UnionPrivacy
Monard law
Monard law
Article

Meerwaardebelasting op financiële activa: de fiscus verduidelijkt

Belgium's tax administration has issued a crucial circular clarifying the application of the new capital gains tax on financial assets, addressing key uncertainties around realization timing, earn-out structures, partnership vehicles, and historical exemptions. The guidance provides essential insights for taxpayers navigating payment modalities, matrimonial property regimes, and the complex interaction between the tax and existing corporate structures.
BelgiumTax
Monard law
Monard law
Article

Council Of State Suspends Awarding Decision For Failure To Comply With The Foreign Subsidies Regulation (Regulation (EU) 2022/2560)

The Belgian Council of State has issued a landmark judgment clarifying the obligations of both contracting authorities and tenderers under the EU's Foreign Subsidies Regulation in public procurement procedures. This ruling addresses a high-value casino concession dispute and establishes critical compliance requirements that could invalidate awarding decisions if not properly followed.
European UnionGovernment, Public Sector
Monard law
Monard law
Article

Asbestattest gemene delen: deadline van 31 december 2026 nadert

Vanaf 31 december 2026 moeten alle VME's in Vlaanderen beschikken over een asbestinventarisattest voor gemene delen van gebouwen ouder dan 2001. Deze nieuwe verplichting geldt zowel los van enige overdracht als bij verkoop van een privatief deel, waarbij zowel het individuele als het gemeenschappelijke asbestattest vereist zijn. Syndici en VME's moeten nu actie ondernemen om blokkering van toekomstige transacties te voorkomen en aansprakelijkheidsrisico's te beperken.
BelgiumReal Estate and Construction
Monard law
Monard law