The EU's Cyber Resilience Act is intended to improve cybersecurity for products with digital components. Photo: Shutterstock/TÜV Rheinland

Cyber Resilience Act (CRA): First reporting requirements effective September 11, 2026