EU Cyber Resilience Act: European Commission publishes draft guidance
The European Commission published draft guidance for the EU Cyber Resilience Act to assist economic operators and market surveillance authorities.
With only months to go until the first set of obligations under the EU Cyber Resilience Act (“CRA”) become applicable, the Commission has published on 3 March 2026 its first draft guidance intended to assist economic operators and market surveillance authorities in applying the CRA. The CRA, as part of the broader EU product law framework, establishes mandatory cybersecurity requirements that will significantly affect most hardware and software products made available on the EU market. CRA... By: Hogan Lovells