EU's Cyber Resilience Act: The Clock is
Ticking

In September 2026, new obligations under the existing Cyber Resilience Act (CRA) will begin to take effect, with the regulation applying in full from December 2027. As a European Union (EU) regulation with extraterritorial effect, it also imposes these obligations on Swiss manufacturers, software providers and distributors, requiring them to ensure compliance whenever their digital products are offered, supplied or distributed within the EU or European Economic Area (EEA).