EU Adopts Cyber Resilience Act to Regulate Internet of Things

The Council of the European Union adopted the Cyber Resilience Act, establishing an EU-wide framework to ensure connected devices and software meet cybersecurity requirements across their lifecycle, from design to end-of-life. The law introduces CE labeling to signal compliance, exempts products already covered by sector-specific EU regulations (e.g., medical, aeronautical, automotive), and will enter into force 20 days after publication, with most provisions applying in 2027 and some earlier.