ARTICLE · 27 MARCH 2026

The EU Cyber Resilience Act's Obligations: What Does It Mean For Open Source Software?

Bryan Cave Leighton Paisner

Contributor

Bryan Cave Leighton Paisner

UK 2026 Chambers Firm Profile Bryan Cave Leighton Paisner (BCLP) is an international, fully...

The Cyber Resilience Act (CRA) is a European regulation which aims to improve cybersecurity and cyber resilience and provides for common cybersecurity standards for products with digital elements.

European UnionTechnology

Pierre-Emmanuel Froge

What is the cyber resilience act and when does it come into force?

The Cyber Resilience Act (CRA) is a European regulation which aims to improve cybersecurity and cyber resilience and provides for common cybersecurity standards for products with digital elements.

Adopted by the EU in October 2024, some of its provisions will be applicable from September 2026 before it comes into full force in December 2027.

What does the CRA mean for open source software ?

The CRA broadly defines software as "the part of an electronic information system which consists of computer code". As a result, every piece of code that enables orders to be given to a computer will be software under the CRA, extending its rules to numerous digital services.

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

The EU Cyber Resilience Act's Obligations: What Does It Mean For Open Source Software?

What is the cyber resilience act and when does it come into force?

What does the CRA mean for open source software ?

Related Articles

Cold Storage, Hot Targets: Hackers Hit French Fridges And Dutch Deliveries

[Blog] IA : Accord Entre ByteDance Et Les Studios De Cinéma Hollywoodiens

IA Act banque et assurance : ce qui s’applique au 2 août 2026 et ce qui bascule en 2027

L’actualité juridique numérique de la semaine – 20 juillet 2026

Une IA signe chez une major : la fin des artistes humains ? (Droit d'auteur & musique) (Video)

Read more about

Related Comparative Guides

Blockchain & Crypto Assets

Fintech

Artificial Intelligence

See more popular content from

IA Act banque et assurance : ce qui s’applique au 2 août 2026 et ce qui bascule en 2027

4 Types Of Innovation: A Strategic Perspective For Sustainable Growth

Spotlight On Regulatory Cross Border: European Commission Bans TikTok From Official Devices

European Payments And Digital Finance: Harmonization, Clarification, And Trust

IPTV pirate : la fin de l’impunité et le début des ennuis

AI Act: A Look Back At The Controversial Publication Of The First General-purpose AI Code Of Practice

The Cyber Resilience Act Is Rewriting The Rules Of Digital Products Safety

EU AI Office Launches Whistleblower Tool To Report AI Act Breaches

Médias et contenus générés par l'IA : une nouvelle obligation de transparence dès 2026

France Tightens Registration Conditions For Digital Assets Service Providers

“I’m Not Dead Yet”: Is The Demise Of The FTC’s Click-to-Cancel Exaggerated?

IRS Updates FAQs On Section 127 Educational Assistance Programs: What Employers Need To Know

Beyond The Battlefield: Private Equity, PPPs, And The Future Of UK Defence Infrastructure?

New Ultimate Beneficial Owner (UBO) Rules Issued

Saudi Arabia Enables Direct Wage Enforcement For Unpaid Employees

Final Roth Catch-up Regulations: Key Takeaways For Plan Sponsors

CMA Steps Up Enforcement On Fake And Misleading Reviews: What Businesses Need To Know

Construction Industry Participants Beware: CISG And CISOP And Their Impact On Overseas Procurement

On Or Off? What To Do With Email When The Employee Is On FMLA Leave.

Saudi Arabia Opens Capital Market To All Foreign Investors From February 2026