{"id":77335,"date":"2026-01-08T17:19:44","date_gmt":"2026-01-08T16:19:44","guid":{"rendered":"https:\/\/fhi.nl\/?post_type=news&#038;p=77335"},"modified":"2026-01-08T17:26:22","modified_gmt":"2026-01-08T16:26:22","slug":"europese-data-verordening-cyber-resilience-act","status":"publish","type":"news","link":"https:\/\/fhi.nl\/en\/news\/europese-data-verordening-cyber-resilience-act\/","title":{"rendered":"European Data Regulation &amp; Cyber Resilience Act"},"content":{"rendered":"<header id=\"header\" class=\"header header--low\">\n\n\t\n\t\t\t<div class=\"header__background header__background--graphic\"><\/div>\n\t\n\t<div class=\"container\">\n\t\t<div class=\"header__content\">\n\t\t\t<div class=\"header__first header__first--alone\">\n\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\t\t\t\t\t<h6 class=\"header__subtitle\"> <\/h6>\n\t\t\t\t\n\t\t\t\t<h1 class=\"header__title\" >\n\t\t\t\t\tEuropean Data Regulation &amp; Cyber Resilience Act\t\t\t\t<\/h1>\n\n\t\t\t\t<div class=\"header__dots-line\">\n\t\t\t\t\t<svg width=\"431\" height=\"9\" viewbox=\"0 0 431 9\" fill=\"none\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M430.799 4.192a1.136 1.136 0 1 1-2.272-.001 1.136 1.136 0 0 1 2.272 0Zm-27.272 0a1.135 1.135 0 1 1-2.27 0 1.135 1.135 0 0 1 2.27 0Zm-27.27 0a1.136 1.136 0 1 1-2.272-.001 1.136 1.136 0 0 1 2.272 0Zm-27.272 0a1.39 1.39 0 1 1-2.78 0 1.39 1.39 0 0 1 2.78 0Zm-27.78 0a1.645 1.645 0 1 1-3.29 0 1.645 1.645 0 0 1 3.29 0Zm-28.29 0a1.9 1.9 0 1 1-3.799 0 1.9 1.9 0 0 1 3.799 0Zm-28.799 0a2.154 2.154 0 1 1-4.308 0 2.154 2.154 0 0 1 4.308 0Zm-29.308 0a2.41 2.41 0 1 1-4.819 0 2.41 2.41 0 0 1 4.819 0Zm-29.819 0a2.663 2.663 0 1 1-5.326.001 2.663 2.663 0 0 1 5.326-.001Zm-30.327 0a2.919 2.919 0 1 1-5.837 0 2.919 2.919 0 0 1 5.837 0Zm-30.837 0a3.173 3.173 0 1 1-6.345.001 3.173 3.173 0 0 1 6.345 0Zm-31.346 0a3.428 3.428 0 1 1-6.856 0 3.428 3.428 0 0 1 6.856 0Zm-31.856 0a3.683 3.683 0 1 1-7.365 0 3.683 3.683 0 0 1 7.365 0Zm-32.365 0a3.937 3.937 0 1 1-7.875 0 3.937 3.937 0 0 1 7.875 0Zm-32.874 0a4.192 4.192 0 1 1-8.384 0 4.192 4.192 0 0 1 8.384 0Z\" fill=\"#FFF960\"\/><\/svg>\t\t\t\t<\/div>\n\n\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"header__description\">\n\t\t\t\t\t\t\t<p>By Mr. Sander Pieroelie, Vestius Attorneys <\/p>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\n\t\t\t<\/div>\n\n\t\t\t\n\t\t<\/div>\n\t<\/div>\n<\/header>\n\n\n\n\n\n<div class=\"text bg--offwhite\">\n\t<div class=\"container\">\n\t\t\t\t\t\t<div class=\"text__content text__content--1-col\">\n\t\t\t<p><strong>The European Union developed a data strategy years ago. The rollout of this strategy involves many new European regulations that directly apply to Dutch businesses and consumers.<\/strong><\/p>\n<p>The European Union recently introduced two regulations that impact technology companies: the European Data Regulation (Data Act) and the Cyber Resilience Act (CRA). In this newsletter, we explain both regulations.<\/p>\n<h2>What is the European Data Regulation (Data Act)?<\/h2>\n<p>The Data Act aims to make data sharing between companies, consumers, and governments in the European Union easier and fairer. For technology companies, this means, among other things, that products and services that generate data must also make that data available to users. Think of IoT devices, machines, or smart software.<br \/>\n<em><br \/>\n<\/em><strong>Key points from the Data Act:<\/strong><\/p>\n<ul>\n<li>Users gain more control over the data their devices generate.<\/li>\n<li>Companies must enable data access technically and contractually.<\/li>\n<li>Clear rules will be introduced for data sharing in emergency situations.<\/li>\n<li>Unfair contractual terms (including between companies) regarding data, but also regarding the resulting liability and rights of customers, will be void or voidable.<\/li>\n<\/ul>\n<p><strong>Entry into force<\/strong><\/p>\n<p>The Data Act has been in effect since September 12, 2025. The Data Act applies to manufacturers of connected products (such as smart devices), providers of related services (apps, IoT), cloud providers (SaaS), governments, and users (both consumers and businesses).<\/p>\n<h2>What is the Cyber Resilience Act (CRA)?<\/h2>\n<p>The CRA focuses on the cybersecurity of all digital products sold in the EU, such as software, IoT devices, and connected hardware. The CRA sets cybersecurity requirements throughout a product&#039;s entire lifecycle.<br \/>\n<strong><br \/>\nKey points of the CRA:<\/strong><\/p>\n<ul>\n<li>Products must be \u201csecure by design\u201d and \u201csecure by default\u201d.<\/li>\n<li>Manufacturers\/importers are responsible for providing timely security updates throughout the product lifecycle (minimum 5 years).<\/li>\n<li>Vendors must actively monitor and resolve vulnerabilities.<\/li>\n<li>Mandatory safety documentation and declarations of conformity will be introduced.<em style=\"font-size: 16px; letter-spacing: -0.32px;\">\u00a0<\/em><\/li>\n<\/ul>\n<p><strong>Entry into force<\/strong><\/p>\n<p>The CRA came into effect on December 10, 2024. From September 11, 2026, a reporting requirement for actively exploited vulnerabilities and incidents will apply. From December 11, 2027, all products with digital elements must comply with the CRA. The CRA applies to manufacturers, importers, distributors, and authorized representatives.<\/p>\n<h2><\/h2>\n<h2>What to do?<\/h2>\n<p>We recommend that you check whether you are subject to the Data Act and\/or CRA, and whether your company complies with the obligations. It&#039;s also wise to review relevant agreements with parties in the supply chain. For example, check for unreasonable contractual terms (Data Act) or agreements with suppliers of hardware or software from outside the EU that you import.<\/p>\n<p><strong>Knowing more?<br \/>\n<\/strong>Do you have questions about how these new rules affect your work? Please contact Sander Pieroelie, attorney at Vestius Advocaten in Amsterdam and affiliated with FHI through FHI Advies. FHI Advies can be reached via <a href=\"mailto:legal@fhi.nl\">legal@fhi.nl<\/a><\/p>\n<hr \/>\n<p><em>The above text is a substantive contribution from our partner Vestius Advocaten.<\/em><\/p>\n\t\t<\/div>\n\t<\/div>\n<\/div>","protected":false},"excerpt":{"rendered":"","protected":false},"featured_media":0,"template":"","branches":[],"events":[],"secretariat":[],"categories":[],"themes_tax":[],"content_types":[526,505],"class_list":["post-77335","news","type-news","status-publish","hentry"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v26.8 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Europese Data Verordening &amp; Cyber Resilience Act - FHI, federatie van technologiebranches<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/fhi.nl\/en\/nieuws\/europese-data-verordening-cyber-resilience-act\/\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Europese Data Verordening &amp; Cyber Resilience Act - FHI, federatie van technologiebranches\" \/>\n<meta property=\"og:url\" content=\"https:\/\/fhi.nl\/en\/nieuws\/europese-data-verordening-cyber-resilience-act\/\" \/>\n<meta property=\"og:site_name\" content=\"FHI, federatie van technologiebranches\" \/>\n<meta property=\"article:modified_time\" content=\"2026-01-08T16:26:22+00:00\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/fhi.nl\/nieuws\/europese-data-verordening-cyber-resilience-act\/\",\"url\":\"https:\/\/fhi.nl\/nieuws\/europese-data-verordening-cyber-resilience-act\/\",\"name\":\"Europese Data Verordening &amp; Cyber Resilience Act - FHI, federatie van technologiebranches\",\"isPartOf\":{\"@id\":\"https:\/\/fhi.nl\/#website\"},\"datePublished\":\"2026-01-08T16:19:44+00:00\",\"dateModified\":\"2026-01-08T16:26:22+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/fhi.nl\/nieuws\/europese-data-verordening-cyber-resilience-act\/#breadcrumb\"},\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/fhi.nl\/nieuws\/europese-data-verordening-cyber-resilience-act\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/fhi.nl\/nieuws\/europese-data-verordening-cyber-resilience-act\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/fhi.nl\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Nieuws\",\"item\":\"https:\/\/fhi.nl\/nieuws\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Europese Data Verordening &amp; Cyber Resilience Act\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/fhi.nl\/#website\",\"url\":\"https:\/\/fhi.nl\/\",\"name\":\"FHI, federatie van technologiebranches\",\"description\":\"Nederlandse branchevereniging voor technologiebranches\",\"publisher\":{\"@id\":\"https:\/\/fhi.nl\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/fhi.nl\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-GB\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/fhi.nl\/#organization\",\"name\":\"FHI, federatie van technologiebranches\",\"url\":\"https:\/\/fhi.nl\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/fhi.nl\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/fhi.nl\/app\/uploads\/2024\/06\/3-e1722349014385.png\",\"contentUrl\":\"https:\/\/fhi.nl\/app\/uploads\/2024\/06\/3-e1722349014385.png\",\"width\":732,\"height\":136,\"caption\":\"FHI, federatie van technologiebranches\"},\"image\":{\"@id\":\"https:\/\/fhi.nl\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.linkedin.com\/company\/fhi-federation-of-technology-branches\",\"https:\/\/www.instagram.com\/fhi_nl\/\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"European Data Regulation &amp; Cyber Resilience Act - FHI, Federation of Technology Industries","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/fhi.nl\/en\/nieuws\/europese-data-verordening-cyber-resilience-act\/","og_locale":"en_GB","og_type":"article","og_title":"Europese Data Verordening &amp; Cyber Resilience Act - FHI, federatie van technologiebranches","og_url":"https:\/\/fhi.nl\/en\/nieuws\/europese-data-verordening-cyber-resilience-act\/","og_site_name":"FHI, federatie van technologiebranches","article_modified_time":"2026-01-08T16:26:22+00:00","twitter_card":"summary_large_image","twitter_misc":{"Estimated reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/fhi.nl\/nieuws\/europese-data-verordening-cyber-resilience-act\/","url":"https:\/\/fhi.nl\/nieuws\/europese-data-verordening-cyber-resilience-act\/","name":"European Data Regulation &amp; Cyber Resilience Act - FHI, Federation of Technology Industries","isPartOf":{"@id":"https:\/\/fhi.nl\/#website"},"datePublished":"2026-01-08T16:19:44+00:00","dateModified":"2026-01-08T16:26:22+00:00","breadcrumb":{"@id":"https:\/\/fhi.nl\/nieuws\/europese-data-verordening-cyber-resilience-act\/#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/fhi.nl\/nieuws\/europese-data-verordening-cyber-resilience-act\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/fhi.nl\/nieuws\/europese-data-verordening-cyber-resilience-act\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/fhi.nl\/"},{"@type":"ListItem","position":2,"name":"Nieuws","item":"https:\/\/fhi.nl\/nieuws\/"},{"@type":"ListItem","position":3,"name":"Europese Data Verordening &amp; Cyber Resilience Act"}]},{"@type":"WebSite","@id":"https:\/\/fhi.nl\/#website","url":"https:\/\/fhi.nl\/","name":"FHI, federation of technology industries","description":"Dutch trade association for technology industries","publisher":{"@id":"https:\/\/fhi.nl\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/fhi.nl\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-GB"},{"@type":"Organization","@id":"https:\/\/fhi.nl\/#organization","name":"FHI, federation of technology industries","url":"https:\/\/fhi.nl\/","logo":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/fhi.nl\/#\/schema\/logo\/image\/","url":"https:\/\/fhi.nl\/app\/uploads\/2024\/06\/3-e1722349014385.png","contentUrl":"https:\/\/fhi.nl\/app\/uploads\/2024\/06\/3-e1722349014385.png","width":732,"height":136,"caption":"FHI, federatie van technologiebranches"},"image":{"@id":"https:\/\/fhi.nl\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.linkedin.com\/company\/fhi-federation-of-technology-branches","https:\/\/www.instagram.com\/fhi_nl\/"]}]}},"_links":{"self":[{"href":"https:\/\/fhi.nl\/en\/wp-json\/wp\/v2\/news\/77335","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fhi.nl\/en\/wp-json\/wp\/v2\/news"}],"about":[{"href":"https:\/\/fhi.nl\/en\/wp-json\/wp\/v2\/types\/news"}],"version-history":[{"count":6,"href":"https:\/\/fhi.nl\/en\/wp-json\/wp\/v2\/news\/77335\/revisions"}],"predecessor-version":[{"id":77342,"href":"https:\/\/fhi.nl\/en\/wp-json\/wp\/v2\/news\/77335\/revisions\/77342"}],"wp:attachment":[{"href":"https:\/\/fhi.nl\/en\/wp-json\/wp\/v2\/media?parent=77335"}],"wp:term":[{"taxonomy":"branches","embeddable":true,"href":"https:\/\/fhi.nl\/en\/wp-json\/wp\/v2\/branches?post=77335"},{"taxonomy":"events","embeddable":true,"href":"https:\/\/fhi.nl\/en\/wp-json\/wp\/v2\/events?post=77335"},{"taxonomy":"secretariat","embeddable":true,"href":"https:\/\/fhi.nl\/en\/wp-json\/wp\/v2\/secretariat?post=77335"},{"taxonomy":"categories","embeddable":true,"href":"https:\/\/fhi.nl\/en\/wp-json\/wp\/v2\/categories?post=77335"},{"taxonomy":"themes","embeddable":true,"href":"https:\/\/fhi.nl\/en\/wp-json\/wp\/v2\/themes_tax?post=77335"},{"taxonomy":"content_types","embeddable":true,"href":"https:\/\/fhi.nl\/en\/wp-json\/wp\/v2\/content_types?post=77335"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}