EU Cyber Resilience Act: 24-Hour Notification Requirement Begins

A new notification obligation under the European Union's Cyber Resilience Act came into effect today. Accordingly, manufacturers will be required to report actively exploited security vulnerabilities to authorities within 24 hours. The new regulation aims to ensure rapid reporting of cybersecurity vulnerabilities and prevent potential damage. Heavy sanctions may be imposed if manufacturers fail to notify within this period. It is stated that fines of up to 15 million euros may be imposed for violations. This penalty amount aims to increase the deterrent effect of the law. This obligation introduced by the Cyber Resilience Act is considered an important step towards enhancing the security of digital products and services across the EU. Not investment advice.