What changed under the Cyber Resilience Act, what it means for the machines you build and sell, and what to do this month. We publish only when something changes what you have to do. Every item links to the official text.
Edited by Edge SDN. A summary, not legal advice. Always check the official text for your case.
By month October 2026 · September 2026 · August 2026 · July 2026 · June 2026 · April 2026 · February 2026 · December 2025 · All
Practical impact Changes a reporting procedure
On 15 October 2026 ENISA updated the FAQ of the CRA Single Reporting Platform with two new answers and one revised answer.
Reporting duty (Art. 14) Installed base
Practical impact Adds or clarifies a duty
On 15 October 2026 the German Bundestag adopted the law that implements the Cyber Resilience Act in Germany (government bill 21/6134), with one change to its entry into force.
New machines from 11 Dec 2027 Importers and distributors
Practical impact Changes a reporting procedure
1 on 12 October 2026 and states that all documentation on its site reflects the changes. The FAQ was updated on 3 October 2026 and now has 33 questions, one of them marked as updated.
Reporting duty (Art. 14)
Practical impact Adds or clarifies a duty
On 2 October 2026 the Italian Council of Ministers approved, in preliminary examination, the legislative decree adapting national law to the Cyber Resilience Act.
New machines from 11 Dec 2027 Reporting duty (Art. 14) Importers and distributors
Practical impact Standard milestone, read and align
The CEN-CENELEC work programme shows EN 40000-1-2, Principles, product risk management and lifecycle activities, together with EN 40000-1-1, Vocabulary, at the approval stage with the formal vote closed on 1 October 2026 and ratification…
New machines from 11 Dec 2027