article thumbnail

The EU’s Cyber Resilience Act Has Now Been Agreed

Inside Privacy

Conducting due diligence on imported PDEs. After this, obligations under the law will come into force over a phased transition period, with the vulnerability reporting obligations kicking in after 21 months (that is, in late 2025) and the remaining obligations after 3 years (that is, in early 2027).