Log in or register
Share on LinkedInShare on LinkedIn

ARTICLE · 29 SEPTEMBER 2022

European Commission Proposes Legislation Imposing New Cybersecurity Requirements On Digital Products

Jones Day
Jones Day
Contributor
Jones Day

Jones Day

Jones Day is a global law firm with more than 2,400 lawyers in 40 offices across five continents....

View firm profile
Explore more from Jones Day

The proposed regulation aims to safeguard EU businesses and consumers buying or using digital products against the risks resulting from inadequate cybersecurity features.

European UnionTechnology
Laurent De Muyter
Laurent De Muyter
Jörg Hladjk
Jörg Hladjk
Olivier Haas
Olivier Haas
Jonathon Little
Jonathon Little
Mauricio Paez
Mauricio Paez
Alexandre Verheyden
Alexandre Verheyden
Undine Von Diemar
Undine Von Diemar
Author LinkedIn connections

On September 15, 2022, the European Commission ("EU") published a proposal for a Cyber Resilience Act, the first EU-wide legislation introducing a single set of cybersecurity rules for hardware and software products placed in the EU market applying throughout their entire lifecycle.

The proposed regulation aims to safeguard EU businesses and consumers buying or using digital products against the risks resulting from inadequate cybersecurity features. The regulation will apply to 'products with digital elements' connected to a device or network, and it will complement the existing EU cybersecurity framework (i.e., the NIS 1 Directive, soon to be replaced by the NIS 2 Directive, and the Cybersecurity Act).

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

Register for freeORLog in

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

View source

Related Articles

Legal Intelligence Newsletters: sign up for the latest legal and regulatory news on your chosen topics

Read more about

Related Comparative Guides

See more popular content from

Article

Be Nice To Claude: Anthropic's Acceptable Use Policy Updates

Anthropic's updated Acceptable Use Policy introduces significant changes for organisations building on Claude, extending far beyond the headline-grabbing prohibition on abusive behaviour towards the AI model. The policy now addresses deceptive campaigns, election interference, weapons development, surveillance systems, and requires human oversight for high-impact decisions affecting individuals' rights and wellbeing.
United KingdomTechnology
Marks & Clerk
Marks & Clerk
Article

The UK Cyber Security And Resilience Bill: What You Need To Know

The UK Government has introduced the Cyber Security and Resilience Bill to address critical gaps in existing cyber security regulations, expanding coverage to data centres, managed service providers, and critical suppliers while granting regulators enhanced enforcement powers. With tightened incident reporting deadlines, turnover-based penalties up to £17 million, and mandatory supply chain resilience measures, organisations across essential services sectors must assess their readiness for compliance
United KingdomTechnology
Browne Jacobson LLP
Browne Jacobson LLP
Article

NYSE And Nasdaq Move To 23-Hour Trading Day: Overnight Session Is An Evolution, But Not Yet A Revolution

The New York Stock Exchange and Nasdaq are implementing overnight trading sessions starting December 6, 2026, extending the trading day to nearly 23 hours by compressing the daily pause to just one hour. While this evolution toward continuous trading introduces new considerations for corporate actions, disclosure timing, and deal execution, the practical impact varies significantly between NYSE-listed companies,
United StatesFinance and Banking
Jones Day
Jones Day
Article

Ninth Circuit Vacates CFAA Injunction Against Perplexity's Comet AI Agent

The Ninth Circuit Court of Appeals vacated a preliminary injunction against Perplexity AI, determining that when an AI agent acts at a user's direction, it is the user—not the AI company—who "accesses" computer systems under federal and California computer fraud statutes. This landmark appellate decision addresses how existing computer-access laws apply to agentic artificial intelligence and has significant implications...
United StatesMedia, Telecoms, IT, Entertainment
Jones Day
Jones Day
Article

China's Supreme Court Issues Landmark Judicial Rules On AI: Implications For Product Liability, IP, Data, And Generative AI

China's Supreme People's Court has issued comprehensive judicial rules addressing artificial intelligence disputes, establishing frameworks for product liability, intellectual property rights, and data protection. These landmark opinions provide critical guidance for global companies navigating AI-related legal risks in China's evolving regulatory landscape.
ChinaIntellectual Property
Jones Day
Jones Day
Article

Ninth Circuit: Breach Of Confidence Confers Standing In Health Data Security Case

The Ninth Circuit has ruled that health plan participants whose confidential information was disclosed without authorization have standing to sue in federal court, even without showing financial loss or future harm. This decision, which departs from the risk-based approach many courts have applied since TransUnion, relies on the centuries-old action for breach of confidence and could have significant implications for companies' privacy commitments and data-sharing practices.
United StatesLitigation, Mediation & Arbitration
Jones Day
Jones Day
Article

EU Commission Pushes for Transposition of the EmpCo Directive on Environmental Claims

The European Commission has initiated infringement procedures against 20 EU Member States for failing to transpose the EmpCo Directive by the March 27, 2026 deadline. This directive aims to combat greenwashing by requiring substantiation of environmental claims and third-party certification for sustainability labels, with full implementation expected by September 27, 2026.
European UnionConsumer Protection
Jones Day
Jones Day
Article

Amendment To The General Rules Under Mexico’s Anti-Money Laundering Law (LFPIORPI): Key Regulatory Changes Under Acuerdo 115/2026

Mexico's comprehensive anti-money laundering framework has undergone a sweeping transformation through Acuerdo 115/2026, introducing mandatory risk-based methodologies, enhanced client due diligence protocols, and automated monitoring requirements. With implementation deadlines beginning March 1, 2027, obligated parties conducting vulnerable activities face compressed timelines to overhaul their compliance infrastructure while navigating heightened enforcement risks and stricter beneficial ownership thresho
MexicoGovernment, Public Sector
Jones Day
Jones Day
Article

Indiana Ruling Exposes Email Marketers To $500-Per-Email Class Actions

A federal court ruling in Indiana has opened the door to class action lawsuits against email marketers, holding that promotional subject lines like "SO MANY FREE GIFTS INSIDE" may violate state anti-spam law even when email bodies contain full disclosures. The decision exposes businesses to $500 in statutory damages per email and creates a new litigation hotspot following similar developments in Washington state.
United StatesLitigation, Mediation & Arbitration
Jones Day
Jones Day