European Commission opens consultation on draft guidance to help manufacturers and developers comply with CRA
Publish Date: 2026-03-09 05:25:00
Source Domain: industrialcyber.co
The European Commission has prepared a Communication providing practical guidance on applying the Cyber Resilience Act (CRA). It will help manufacturers, developers, and other stakeholders understand their obligations and ensure consistent implementation across the EU, with particular focus on easing compliance for micro, small, and medium-sized enterprises. As part of the broader simplification exercise, the Commission is consulting stakeholders on the draft guidance to ensure alignment with implementation efforts, practical challenges, and market realities.
Stakeholders are invited to submit comments using the attached template within the four-week consultation window, ending Mar. 31 (midnight Brussels time). All feedback will inform the finalisation of this initiative and will be published on this site in accordance with the feedback rules.
The CRA entered into force on Dec. 10, 2024. The main obligations introduced by the Act will apply from Dec. 11, 2027, with reporting obligations applicable from Sept. 11 this year. The Commission is actively working to strengthen the EU’s cybersecurity resilience and capabilities. A new cybersecurity package was proposed in January.
“With today’s guidelines, the Commission supports the effective application of the Cyber Resilience Act,” Henna Virkkunen, executive vice-president for tech sovereignty, security and democracy, said in a media statement last week. “From baby monitors to smart watches, digital elements are part of our daily lives, and we will make sure all digital products on the EU market are safe from cyber threats.”
Article 26 requires the Commission to publish guidance that will assist economic operators in applying the CRA, with a particular focus on facilitating compliance by microenterprises and small and medium-sized enterprises. It is therefore important that economic operators are provided with timely guidance to assist their preparations towards compliance with…
