Log in or register
Share on LinkedInShare on LinkedIn

ARTICLE · 20 AUGUST 2026

Part One: Companies Prepare For First Notification Obligations To Apply As Commission Publishes Implementation Guidance

K&L Gates
K&L Gates
Contributor
K&L Gates

K&L Gates

The Firm K&L Gates is an integrated, international law firm. As a single global law firm, truly...

View firm profile
Explore more from K&L Gates

The European Union's Cyber Resilience Act introduces mandatory cybersecurity requirements for products with digital elements, with critical notification obligations taking effect in September 2026.

GermanyTechnology
Sarah Pearce
Sarah Pearce
Thomas Nietsch
Thomas Nietsch
Ulrike Elteste
Ulrike Elteste

On 20 November 2024, the European Union published Regulation (EU) 2024/2847 on horizontal cybersecurity requirements for products with digital elements, known as the Cyber Resilience Act (Regulation (EU) 2024/2847) (the CRA). The CRA introduces the first EU-wide, horizontal legal framework imposing mandatory cybersecurity requirements on products with digital elements throughout their lifecycle. While most provisions of the CRA will apply from 11 December 2027, and only to products placed on the market in the European Economic Area (EEA) from that date, the notification obligations under Article 14 CRA apply to all products with digital elements, regardless of when they were placed on the market. Manufacturers, importers and distributors placing connected products on the EU market should treat compliance planning as a near-term priority.

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

Register for freeORLog in

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

View source

Related Articles

Legal Intelligence Newsletters: sign up for the latest legal and regulatory news on your chosen topics

Read more about

Related Comparative Guides

See more popular content from

Article

Deepfakes, Chatbots, AI-Generated Text: European Commission Details Transparency Obligations Under The AI Act

The European Commission has published draft guidelines interpreting the AI Act's transparency obligations, establishing when and how organizations must disclose AI-generated content, deepfakes, and automated interactions. These guidelines clarify that deepfake labeling applies regardless of intent to deceive, that AI systems must identify themselves at the point of interaction, and that the editorial review exception for AI-generated text requires substantive human oversight with clear accountability.
European UnionTechnology
Greenberg Traurig
Greenberg Traurig
Article

Deepfakes, Chatbots, KI-Texte: EU-Kommission Konkretisiert Transparenzpflichten Der KI-Verordnung

The European Commission has published draft guidelines interpreting the AI Act's transparency obligations, establishing when and how organizations must disclose AI-generated content, deepfakes, and automated interactions. These guidelines clarify that deepfake labeling applies regardless of intent to deceive, that AI systems must identify themselves at the point of interaction, and that the editorial review exception for AI-generated text requires substantive human oversight with clear accountability.
GermanyTechnology
Greenberg Traurig
Greenberg Traurig
Article

Cybercrime & Compliance: Navigating Risks In A Digital World – A Conference Report

Herbert Smith Freehills Kramer's Frankfurt Corporate Crime & Investigations team hosted a conference examining cybercrime threats, AI-driven attacks, and the evolving responsibilities of corporate leadership in building cyber resilience. Senior representatives from law enforcement, industry leaders, and global legal partners explored prevention strategies, incident response protocols, and the complex liability landscape facing organizations in an increasingly digital threat environment.
GermanyTechnology
Herbert Smith Freehills Kramer LLP
Herbert Smith Freehills Kramer LLP
Article

Text-Message Marketing In Texas, One Year After SB 140

Texas Senate Bill 140 (SB 140) took effect 1 September 2025, and applies to conduct occurring on or after that date. The bill amended Section 302 of the Texas Business and Commerce Code to extend registration and disclosure requirements to text messages by expanding the definition of “Telephone solicitation,” which previously applied only to a “telephone call,” to include certain transmissions of text or graphic messages and images. In addition, SB 140 added a definition of “Telephone call” that incorporates the definition found in Section 304, which includes certain text or graphic messages and images, but excludes certain agreed-to transmissions.
United StatesMedia, Telecoms, IT, Entertainment
K&L Gates
K&L Gates
Article

SEC And CFTC Open Door To Tokenized Markets After Clarity Fails To Advance

The SEC and CFTC have issued coordinated regulatory relief measures that significantly advance crypto-based trading infrastructure in US markets, bypassing Congressional gridlock on the CLARITY Act. These orders establish new frameworks for tokenized securities venues and passive software providers, potentially reshaping how digital assets are traded and accessed in regulated markets.
United StatesFinance and Banking
K&L Gates
K&L Gates
Article

EU AI Act: Final Guidelines On Transparency Obligations Under Article 50

The European Commission has issued guidelines on transparency obligations under Article 50 of the EU AI Act, clarifying how providers and deployers must inform individuals when they interact with AI systems or are exposed to AI-generated content. These non-binding guidelines address a wide range of AI applications, from chatbots to deepfake technologies, and establish four main transparency scenarios with specific disclosure requirements that businesses must now prepare to implement.
European UnionGovernment, Public Sector
K&L Gates
K&L Gates
Article

Venezuela's Reopening: Investment, Infrastructure, And Technology Opportunities In A Rebuilding Latin America

Venezuela's post-Maduro reopening is creating unprecedented opportunities for foreign investors across energy, mining, telecommunications, and infrastructure sectors. With expanding OFAC sanctions relief, landmark legislative reforms, and major US companies nearing multibillion-dollar deals, the country presents investment prospects not seen in a generation—though success requires disciplined navigation of corruption, security, and regulatory risks.
United StatesInternational Law
K&L Gates
K&L Gates
Article

New EU Withdrawal Button Requirement: Practical Implications And Recommendations For US And Global Online Sellers

The European Union's new Consumer Rights Directive amendment introduces a mandatory "withdrawal button" for online merchants, fundamentally changing how consumers exercise their 14-day right of withdrawal from distance contracts. This requirement, effective June 19, 2026, applies to any trader—including US-based companies—actively selling to EU consumers, creating new compliance obligations around button placement, design standards, data collection, and confirmation processes. Understanding whic
European UnionConsumer Protection
K&L Gates
K&L Gates
Article

United States Opens A New Chapter In Civil Nuclear Cooperation With The Kingdom Of Saudi Arabia

The United States and Saudi Arabia have signed a landmark nuclear cooperation agreement under Section 123 of the Atomic Energy Act, establishing the legal framework for decades of civilian nuclear partnership. This agreement resolves years of debate over nonproliferation conditions and positions US companies to participate in Saudi Arabia's ambitious civil nuclear program. The deal carries significant implications for US engagement in the Middle East, international nuclear commerce, and the global competiti
GlobalGovernment, Public Sector
K&L Gates
K&L Gates