Article 14 reporting obligations have applied since 11 September 2026. Next: Full application, 11 Dec 2027.

Full timeline

About

We built a community to talk openly about the EU Cyber Resilience Act.

Read insights on what the regulation means in practice, join the discussion with others working through it, and put your own questions to experts who have already been there.

Who

CRA Updates is an independent community resource brought to you by the team behind FOSSA, a software security and compliance platform. It is not affiliated with, endorsed by, or acting on behalf of the European Commission or any EU institution.

Editorial policy
  • Every article names its author and their organisation.
  • Claims about the law cite the article or annex they rest on.
  • Nothing here is legal advice.
The law

Regulation (EU) 2024/2847 — Official text on EUR-Lex

Community

Posts belong to their authors and are moderated under the community guidelines.