Europe Girds for Looming IoT Security Regulations

European Commission Publishes Draft Guidance for Cyber Resilience Act David Meyer • March 27, 2026

Key implementation deadlines loom for one of Europe's most consequential cybersecurity laws and draft guidance from the European Union may help manufacturers comply - up to a point.

See Also: AI Impersonation Is the New Arms Race—Is Your Workforce Ready?

The Cyber Resilience Act is an expansive law approved in 2024 that will introduce security requirements for all manner of internet-connected "digital products," from smart fridges and phones to apps, enterprise software and even some cloud services.

Much as the EU General Data Protection Regulation influenced how companies handle data around the world, the CRA will force security-first design choices on any company that wants to sell its digital products in the European single market. Serious cybersecurity assessments and protections will become essential to receiving that crucial "CE" mark of conformity, without which ...