Cyber Resilience Act is on the Technology & Digital rulebook because its official title matches cyber resilience. Source: EUR-Lex and European Parliament procedure file; company-specific applicability still depends on your activities. Methodology
Cyber Resilience Act: what it means for Technology & Digital
The Cyber Resilience Act is part of the EU rulebook for technology & digital. Its subject matter covers cyber resilience — core to the sector. Here’s what the act does, why it’s on your radar, and how to see whether it affects your specific company.
- Act
- 32024R2847
- Type
- Regulation
- Stage
- Procedure completed
- Dated
- 2024-10-23
- Procedure
- 2022/0272(COD)
- Lead committee
- ITRE
What the act does
to lay down a horizontal Union regulatory framework establishing comprehensive cybersecurity requirements for all products with digital elements. PROPOSED ACT: Regulation of the European Parliament and of the Council. ROLE OF THE EUROPEAN PARLIAMENT: the European Parliament decides in accordance with the ordinary legislative procedure and on an equal footing with the Council. BACKGROUND: hardware and software products are increasingly subject to successful cyberattacks, leading to an estimated global annual cost of cybercrime of EUR 5.5 trillion by 2021. Such products suffer from two major problems adding costs…
Why it matters for Technology & Digital
Digital and software companies are squarely in scope of the EU's new tech rulebook — AI, platform regulation, cybersecurity and data. These are the EU acts that most often apply.
Cyber Resilience Act sits in that rulebook because its subject matter covers cyber resilience. Whether — and how — it applies to a given business depends on that business’s activities, products and markets.
Does the Cyber Resilience Act apply to your company?
This act’s scope covers:
- cyber resilience
Does your business touch any of these?
The rest of the Technology & Digital rulebook
- Council Regulation (EU) 2024/1732 of 17 June 202432024R1732
- Regulation (EU) 2024/1689 laying down harmonised rules on artificial intelligence (Artificial Intelligence Act)32024R1689
- Regulation (EU) 2022/2065 on a Single Market For Digital Services (Digital Services Act)32022R2065
- Regulation (EU) 2022/1925 on contestable and fair markets in the digital sector (Digital Markets Act)32022R1925
- Regulation (EU) 2022/868 on European data governance (Data Governance Act)32022R0868
- Regulation (EU) 2023/2854 on harmonised rules on fair access to and use of data (Data Act)32023R2854
Monitor this regulation
Get an email when Cyber Resilience Act advances — free, no account. We only email on real changes.
Primary sources
The act’s summary is the European Parliament’s own procedure record; the sector connection is the act’s stated subject matter. Lex shows the law and the grounded connection — not legal advice. Data © European Union (Decision 2011/833/EU). Methodology.