Consultation started for new European Cyber Resilience Act

The European Commission has started a consultation on the European Cyber Resilience Act. This proposal aims at common cybersecurity rules for manufacturers and sellers of hardware and software products and related services, including non-integrated software throughout its life cycle.

According to the European Commission, the security of many digital products and services leaves much to be desired. European legislation has already been drawn up and/or is being developed on cybersecurity of equipment and products, but it does not cover all types of digital products.

The European Cyber Resilience Act is therefore a horizontal addition to this. What the law will look like is still unknown. Various policy options are kept open, such as introducing voluntary measures, a mixed approach of mandatory and soft rules, 'ad hoc interventions' or maintaining the status quo. You can respond to the consultation until May 25.