Cyber Resilience Act

[plehegar]

Describe the problem you think needs solving

The Cyber Resilience Act enhances cybersecurity standards of products that contain a digital component, requiring manufacturers and retailers to ensure cybersecurity throughout the lifecycle of their products.
The Cyber Resilience Act entered into force on 10 December 2024. The main obligations introduced by the Act will apply from 11 December 2027.

W3C needs to figure out how this will affect us.

cc @rigow

[rigow]

Permanent link to CRA is in Eur-Lex. Main issue is dealing with open source stewards according to Art. 24 of the CRA. We also need to find out whether the making of common technical specifications is affected. This touches on security by design paradigm