EU Council and Parliament Reach Agreement on Cyber Resilience Act

The Cyber Resilience Act (CRA), the EU’s upcoming legislation to boost the security of digital products, is now only one step away from being officially adopted.

After days of debate within EU institutions, the European Parliament and the EU Council reached a political agreement on the legislation on December 3.

First proposed by the EU Commission in September 2022, the CRA aims to introduce security requirements for connected device manufacturers within the Union.

The EU institutions had already announced a provisional agreement on November 30, where it was reported that they reached a consensus on “most technical aspects of the law.”