Full-Service Law Firm solving complex challenges through bold thinking, precise execution, and shared purpose.

Full Service Law Firm | Michael Best & Friedrich LLP

Specializing in the Intersection of Business &amp; Government

Meet our team of trusted advisors, strategic thinkers, and community builders dedicated to client success.

Learn about our full-service legal and business solutions, designed to address complex challenges for leading organizations across industries.

Access thought leadership, news, and resources to stay informed about the latest trends, legal developments, and industry innovations.

Discover how partnership, bold thinking, and precise execution drive results for clients nationwide.

Explore how our national reach and local expertise support clients across the United States and beyond.

Grow at a firm designed to bring out your best.

<p>The European Union's Cyber Resilience Act (CRA) will become legally binding on December 20, 2024. It is part of a suite of new cybersecurity regulations for the EU, including the NIS2 Directive and updated rules for EU institutions. These laws are set to reshape the digital landscape, mandating stronger security measures for hardware, software, and critical infrastructure.</p><p>This law has particular implications for those utilizing older operating systems and code bases. The CRA mandates that all products with digital elements, regardless of the age of their underlying technology, must meet stringent cybersecurity requirements before entering the EU market. This regulation forces a shift in product development, emphasizing security as a fundamental aspect of design and functionality.</p><p>There are thousands of connected digital products on the market, with more coming out every day - many now featuring AI. The CRA will have a major impact on companies producing and selling these products in the EU market. Of particular note is the requirement for manufacturers to ensure product security throughout the entire lifecycle. This includes a minimum five-year period post-sale during which vulnerabilities must be effectively addressed.</p><p>The Act also introduces mandatory cybersecurity risk assessments for all products. This process will likely expose vulnerabilities in older operating systems and code, potentially necessitating substantial updates, redesigns, or even the discontinuation of certain products unable to meet the new standards.</p><p>The CRA was passed in the EU, but it will have far-reaching implications. It is the first global regulation to establish comprehensive security requirements for product market entry. As the GDPR did for data privacy, the CRA is likely to set new international benchmarks for cybersecurity practices. Companies worldwide, regardless of their location, will need to comply with the new standards if they wish to sell their products in the EU market. Some manufacturers may opt to universally adopt these practices rather than create different versions of their products for different markets, effectively expanding the CRA's coverage. This could extend the act's impact beyond mere compliance, potentially reshaping the global approach to digital security.</p><input type='hidden' id='passle-remote-hosting-tracking-shortcode' value='102jpd1'/><blockquote class="wp-block-quote passle-quote has-cite-link"><p>The Act would see inadequate security features become a thing of the past with the introduction of mandatory cybersecurity requirements for manufacturers and retailers</p><cite><a href="https://www.thestack.technology/eus-gdpr-level-cyber-resilience-act-comes-into-force/" aria-label="www.thestack.technology/..." title="https://www.thestack.technology/eus-gdpr-level-cyber-resilience-act-comes-into-force/" target="_blank">www.thestack.technology/...</a></cite></blockquote><div class="passle-featured-image passle-featured-image-position-bottom"><img src="https://images.passle.net/fit-in/400x400/filters:crop(0,176,2118,1191)/Passle/5f6edd8e8cb62a0bec3e5fd2/SearchServiceImages/2024-11-21-19-35-36-207-673f8b884e2ced0e7b40a353.jpg" alt="Featured Image" /></div>

Cyber Resilience Act Reaches Beyond the European Union

Related People

You may also be interested in these

RNG Volumes at Landfills Lead the Way

Tracy James Named to North Carolina Legal 250

What Happens to Your Business When You Can’t Run It?

Related People

You may also be interested in these

RNG Volumes at Landfills Lead the Way

Tracy James Named to North Carolina Legal 250

What Happens to Your Business When You Can’t Run It?

Slide Menu

Slide Search