ARTICLE · 22 NOVEMBER 2024

What You Need To Know About The EU Cyber Resilience Act

Rouse

Explore more from Rouse

On 10 October 2024, the European Council (Council) adopted the Regulation (EU) 2024/2847 on horizontal cybersecurity requirements...

European UnionTechnology

Jennifer Rönnerhed

Author LinkedIn connections

New law will enter into force in December 2024

On 10 October 2024, the European Council (Council) adopted the Regulation (EU) 2024/2847 on horizontal cybersecurity requirements for products with digital elements (Cyber Resilience Act "CRA"). The regulation was published in the Official Journal of the European Union on 20 November 2024 and will enter into force during December 2024. A transition period of 21 months will follow.

The CRA targets manufacturers, distributors and importers by regulating increased cybersecurity for products with digital elements (which include smartphones, laptops, password managers, smart home products with security functionality like smart door locks, security cameras or baby monitoring systems - any product that is directly or indirectly connected to a network, or another device) prior to them being put on the internal EU market, by reducing the hardware and software vulnerabilities throughout a product's lifecycle.

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

Register for freeORLog in

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

Related Articles

Deploying Chatbots, Don’t Overlook The Legal Risks

United KingdomTechnology

Field Seymour Parkes

AI & Privilege: What You Need To Know

United KingdomTechnology

Redrawing The Lines: FCA Consults On Cryptoasset Perimeter Guidance And DeFi Expectations

United KingdomTechnology

Freshfields Bruckhaus Deringer

Be Nice To Claude: Anthropic's Acceptable Use Policy Updates

United KingdomTechnology

Who Decides Which Systems Come Back First After An Attack?

United KingdomTechnology

Legal Intelligence Newsletters: sign up for the latest legal and regulatory news on your chosen topics

Read more about

Technology
- Cybersecurity

Related Comparative Guides

Comparative Guide

Blockchain & Crypto Assets

Comparative Guide

Fintech

Comparative Guide

Artificial Intelligence

See more popular content from

Technology

Be Nice To Claude: Anthropic's Acceptable Use Policy Updates

Anthropic's updated Acceptable Use Policy introduces significant changes for organisations building on Claude, extending far beyond the headline-grabbing prohibition on abusive behaviour towards the AI model. The policy now addresses deceptive campaigns, election interference, weapons development, surveillance systems, and requires human oversight for high-impact decisions affecting individuals' rights and wellbeing.

United KingdomTechnology

The Latest Scottish Tech Industry Survey Results At A Glance

Some key takeaways from the Scottish Tech Industry Survey 2025.

United KingdomTechnology

EU Digital Omnibus On AI Enters Into Force

The EU has introduced its first major amendment to the AI Act through the AI Omnibus regulation, which delays certain compliance deadlines while maintaining others. Organizations must understand which obligations remain on schedule, including transparency requirements and general-purpose AI provisions, and which have been deferred, such as high-risk AI system requirements.

European UnionTechnology

AI In Advertising: Do I Need To Label My AI-generated Ad?

Advertisers using AI-generated content face complex transparency requirements that vary significantly between the UK and EU. While UK law focuses on preventing consumer deception without explicit AI labelling mandates, the EU AI Act introduces strict disclosure obligations for 'deep fakes' that could catch even UK-based campaigns if they reach EU audiences.

European UnionTechnology

Browne Jacobson LLP

The UK Cyber Security And Resilience Bill: What You Need To Know

The UK Government has introduced the Cyber Security and Resilience Bill to address critical gaps in existing cyber security regulations, expanding coverage to data centres, managed service providers, and critical suppliers while granting regulators enhanced enforcement powers. With tightened incident reporting deadlines, turnover-based penalties up to £17 million, and mandatory supply chain resilience measures, organisations across essential services sectors must assess their readiness for compliance

United KingdomTechnology

Browne Jacobson LLP

The EU AI Act’s Transparency Rules Are Now Live: What Organisations Need To Do

As of 2 August 2026, the EU AI Act’s transparency obligations under Article 50 are now in effect, with one limited exception for providers of AI systems generating synthetic audio, image, video or text content that...

United KingdomTechnology

Kingsley Napley LLP

The EU’s New AI Transparency Rules: What You Need To Know

The European Commission has published its Code of Practice on marking and labelling AI-generated content, helping businesses to meet new transparency duties under the EU AI Act.

European UnionTechnology

DMH Stallard LLP

Cyber Security And Resilience Bill: What's The Latest And What Should Businesses Do Now?

The National Cyber Security Centre emphasizes five critical areas requiring director-level attention: risk management, strategy, people, incident planning and response, and assurance oversight. Organizations must establish robust governance frameworks to address evolving cyber threats and ensure comprehensive resilience across their operations.

United KingdomTechnology

Celsius vs Tether: Court Ruling Marks Key Moment In Cross-Border Crypto Litigation

A recent ruling from the U.S. Bankruptcy Court has paved the way for Celsius Network to continue its $4 billion lawsuit against stablecoin issuer Tether.

United KingdomTechnology

Spencer West LLP

‘One Engine, Configured A Thousand Different Ways’ – Is Claude For Legal The Next Big Shift In Legal Tech?

On 12 May, Anthropic launched Claude for Legal, marking a shift in the AI company’s positioning, from primarily powering legal AI products such as Harvey and Legora, towards potentially becoming a legal platform in its own right.

United KingdomTechnology