{"id":29571,"date":"2024-12-10T09:52:57","date_gmt":"2024-12-10T09:52:57","guid":{"rendered":"https:\/\/thelegalcompany.nl\/?p=29571"},"modified":"2026-09-02T07:17:46","modified_gmt":"2026-09-02T07:17:46","slug":"new-2027-legislation-on-the-security-of-digital-products","status":"publish","type":"post","link":"https:\/\/thelegalcompany.nl\/en\/new-2027-legislation-on-the-security-of-digital-products\/","title":{"rendered":"New 2027 Legislation on the Security of Digital Products"},"content":{"rendered":"<p>The Cyber Resilience Act (CRA), published on 20 November 2024, is a European Regulation, comparable to the GDPR, and is therefore directly applicable in all EU member states. The regulation takes effect on <strong>11 December 2027<\/strong>, with the exception of a few articles (the reporting obligation takes effect on 11 September 2026). Unlike the NIS2 Directive, the CRA is not limited to medium-sized and large companies.<\/p>\n<p>This regulation focuses on the cybersecurity of products with digital elements, including AI. The goal? To strengthen the digital security of products and better protect consumers and businesses against cyber threats. In principle, all hardware and software will fall under the CRA, with the exception in principle of Software as a Service (SaaS), which does fall under NIS2.<\/p>\n<p>The CRA imposes mandatory and essential cybersecurity requirements on manufacturers and distributors of products with digital components. According to the European Commission, the regulation provides:<\/p>\n<ul>\n<li><strong>Harmonization of rules<\/strong> for placing digital products and software on the market.<\/li>\n<li><strong>Mandatory cybersecurity requirements<\/strong> for all stages of the product lifecycle: from design to maintenance.<\/li>\n<li><strong>A duty of care<\/strong> that ensures security requirements are met throughout the entire lifespan of products.<\/li>\n<\/ul>\n<p><strong>Link with the EU AI Act<br \/>\n<\/strong>An important aspect of the CRA is its interaction with the EU AI Act, as set out in Article 12. AI systems classified as high-risk fall under specific provisions of both regulations:<\/p>\n<ul>\n<li>Products that comply with the cybersecurity requirements of the CRA are deemed to also comply with the requirements of Article 15 of the EU AI Act.<\/li>\n<li>High-risk AI systems that use internal control procedures (Article 43(2), EU AI Act) must additionally undergo the CRA&#8217;s conformity assessments.<\/li>\n<\/ul>\n<p><strong>What does this mean for organizations?<br \/>\n<\/strong>The CRA will become fully effective from <strong>11 December 2027<\/strong> and, like the GDPR and the EU AI Act, is a directly applicable EU regulation. This means companies in all member states are required to comply with the new requirements. For organizations developing AI systems or placing products with digital elements on the market, it is crucial to prepare now for this harmonization of cybersecurity rules.<\/p>\n<p>With the Cyber Resilience Act, the EU is once again taking a major step in regulating digital security, and its impact on the AI sector should not be underestimated. This is, in any case, <u>the<\/u> moment to thoroughly review your own systems, products, and processes.<\/p>\n<p><strong>What can you do now?<br \/>\n<\/strong>Compliance with AI, cybersecurity, and data legislation is not only a legal obligation but also an opportunity for organizations to strengthen safe and responsible innovation and increase trust among customers and\/or stakeholders.<\/p>\n<p><strong>The Legal Company&#8217;s business lawyers combine legal expertise with knowledge of technology when it comes to the action points above. Whether you are just starting out with AI or want to analyze your existing systems, we ensure that you are not only prepared for the regulations but also benefit from them strategically. <\/strong><\/p>\n<p><strong>Don&#8217;t wait until the deadlines approach. Contact us today at <a href=\"mailto:info@thelegalcompany.nl\">info@thelegalcompany.nl<\/a> or call 020 345 0152.<\/strong><\/p>\n<p><em>This article was published on 10 December 2024<\/em><\/p>\n","protected":false},"excerpt":{"rendered":"<p>The Cyber Resilience Act (CRA), published on 20 November 2024, is a European Regulation, comparable to the GDPR, and is therefore directly applicable in all EU member states. The regulation takes effect on 11 December 2027, with the exception of a few articles (the reporting obligation takes effect on 11 September 2026). Unlike the NIS2 [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":24378,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"page_builder":"","iawp_total_views":2,"footnotes":"","_et_pb_custom_css":""},"categories":[199],"tags":[],"class_list":["post-29571","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ai"],"acf":[],"_et_pb_custom_css":"","yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.7 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>New 2027 Legislation on the Security of Digital Products - The Legal Company<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/thelegalcompany.nl\/en\/new-2027-legislation-on-the-security-of-digital-products\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"New 2027 Legislation on the Security of Digital Products - The Legal Company\" \/>\n<meta property=\"og:description\" content=\"The Cyber Resilience Act (CRA), published on 20 November 2024, is a European Regulation, comparable to the GDPR, and is therefore directly applicable in all EU member states. The regulation takes effect on 11 December 2027, with the exception of a few articles (the reporting obligation takes effect on 11 September 2026). Unlike the NIS2 [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/thelegalcompany.nl\/en\/new-2027-legislation-on-the-security-of-digital-products\/\" \/>\n<meta property=\"og:site_name\" content=\"The Legal Company\" \/>\n<meta property=\"article:published_time\" content=\"2024-12-10T09:52:57+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-09-02T07:17:46+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/thelegalcompany.nl\/wp-content\/uploads\/2024\/12\/cyberveiligheid.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"2500\" \/>\n\t<meta property=\"og:image:height\" content=\"1728\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"devteam\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"devteam\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/thelegalcompany.nl\\\/en\\\/new-2027-legislation-on-the-security-of-digital-products\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/thelegalcompany.nl\\\/en\\\/new-2027-legislation-on-the-security-of-digital-products\\\/\"},\"author\":{\"name\":\"devteam\",\"@id\":\"https:\\\/\\\/thelegalcompany.nl\\\/en\\\/#\\\/schema\\\/person\\\/e93b72dbe66192effeea36c4c44d5b0e\"},\"headline\":\"New 2027 Legislation on the Security of Digital Products\",\"datePublished\":\"2024-12-10T09:52:57+00:00\",\"dateModified\":\"2026-09-02T07:17:46+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/thelegalcompany.nl\\\/en\\\/new-2027-legislation-on-the-security-of-digital-products\\\/\"},\"wordCount\":503,\"image\":{\"@id\":\"https:\\\/\\\/thelegalcompany.nl\\\/en\\\/new-2027-legislation-on-the-security-of-digital-products\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/thelegalcompany.nl\\\/wp-content\\\/uploads\\\/2024\\\/12\\\/cyberveiligheid.jpg\",\"articleSection\":[\"AI\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/thelegalcompany.nl\\\/en\\\/new-2027-legislation-on-the-security-of-digital-products\\\/\",\"url\":\"https:\\\/\\\/thelegalcompany.nl\\\/en\\\/new-2027-legislation-on-the-security-of-digital-products\\\/\",\"name\":\"New 2027 Legislation on the Security of Digital Products - The Legal Company\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/thelegalcompany.nl\\\/en\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/thelegalcompany.nl\\\/en\\\/new-2027-legislation-on-the-security-of-digital-products\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/thelegalcompany.nl\\\/en\\\/new-2027-legislation-on-the-security-of-digital-products\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/thelegalcompany.nl\\\/wp-content\\\/uploads\\\/2024\\\/12\\\/cyberveiligheid.jpg\",\"datePublished\":\"2024-12-10T09:52:57+00:00\",\"dateModified\":\"2026-09-02T07:17:46+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/thelegalcompany.nl\\\/en\\\/#\\\/schema\\\/person\\\/e93b72dbe66192effeea36c4c44d5b0e\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/thelegalcompany.nl\\\/en\\\/new-2027-legislation-on-the-security-of-digital-products\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/thelegalcompany.nl\\\/en\\\/new-2027-legislation-on-the-security-of-digital-products\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/thelegalcompany.nl\\\/en\\\/new-2027-legislation-on-the-security-of-digital-products\\\/#primaryimage\",\"url\":\"https:\\\/\\\/thelegalcompany.nl\\\/wp-content\\\/uploads\\\/2024\\\/12\\\/cyberveiligheid.jpg\",\"contentUrl\":\"https:\\\/\\\/thelegalcompany.nl\\\/wp-content\\\/uploads\\\/2024\\\/12\\\/cyberveiligheid.jpg\",\"width\":2500,\"height\":1728},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/thelegalcompany.nl\\\/en\\\/new-2027-legislation-on-the-security-of-digital-products\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/thelegalcompany.nl\\\/en\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"New 2027 Legislation on the Security of Digital Products\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/thelegalcompany.nl\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/thelegalcompany.nl\\\/en\\\/\",\"name\":\"The Legal Company\",\"description\":\"Juristen voor het bedrijfsleven\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/thelegalcompany.nl\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/thelegalcompany.nl\\\/en\\\/#\\\/schema\\\/person\\\/e93b72dbe66192effeea36c4c44d5b0e\",\"name\":\"devteam\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/de35b4a8e5902644cd0a588c686c4a2f4afcbf52c653e97d48799a725fbaad23?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/de35b4a8e5902644cd0a588c686c4a2f4afcbf52c653e97d48799a725fbaad23?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/de35b4a8e5902644cd0a588c686c4a2f4afcbf52c653e97d48799a725fbaad23?s=96&d=mm&r=g\",\"caption\":\"devteam\"},\"url\":\"https:\\\/\\\/thelegalcompany.nl\\\/en\\\/author\\\/devteam\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"New 2027 Legislation on the Security of Digital Products - The Legal Company","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/thelegalcompany.nl\/en\/new-2027-legislation-on-the-security-of-digital-products\/","og_locale":"en_US","og_type":"article","og_title":"New 2027 Legislation on the Security of Digital Products - The Legal Company","og_description":"The Cyber Resilience Act (CRA), published on 20 November 2024, is a European Regulation, comparable to the GDPR, and is therefore directly applicable in all EU member states. The regulation takes effect on 11 December 2027, with the exception of a few articles (the reporting obligation takes effect on 11 September 2026). Unlike the NIS2 [&hellip;]","og_url":"https:\/\/thelegalcompany.nl\/en\/new-2027-legislation-on-the-security-of-digital-products\/","og_site_name":"The Legal Company","article_published_time":"2024-12-10T09:52:57+00:00","article_modified_time":"2026-09-02T07:17:46+00:00","og_image":[{"width":2500,"height":1728,"url":"https:\/\/thelegalcompany.nl\/wp-content\/uploads\/2024\/12\/cyberveiligheid.jpg","type":"image\/jpeg"}],"author":"devteam","twitter_card":"summary_large_image","twitter_misc":{"Written by":"devteam","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/thelegalcompany.nl\/en\/new-2027-legislation-on-the-security-of-digital-products\/#article","isPartOf":{"@id":"https:\/\/thelegalcompany.nl\/en\/new-2027-legislation-on-the-security-of-digital-products\/"},"author":{"name":"devteam","@id":"https:\/\/thelegalcompany.nl\/en\/#\/schema\/person\/e93b72dbe66192effeea36c4c44d5b0e"},"headline":"New 2027 Legislation on the Security of Digital Products","datePublished":"2024-12-10T09:52:57+00:00","dateModified":"2026-09-02T07:17:46+00:00","mainEntityOfPage":{"@id":"https:\/\/thelegalcompany.nl\/en\/new-2027-legislation-on-the-security-of-digital-products\/"},"wordCount":503,"image":{"@id":"https:\/\/thelegalcompany.nl\/en\/new-2027-legislation-on-the-security-of-digital-products\/#primaryimage"},"thumbnailUrl":"https:\/\/thelegalcompany.nl\/wp-content\/uploads\/2024\/12\/cyberveiligheid.jpg","articleSection":["AI"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/thelegalcompany.nl\/en\/new-2027-legislation-on-the-security-of-digital-products\/","url":"https:\/\/thelegalcompany.nl\/en\/new-2027-legislation-on-the-security-of-digital-products\/","name":"New 2027 Legislation on the Security of Digital Products - The Legal Company","isPartOf":{"@id":"https:\/\/thelegalcompany.nl\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/thelegalcompany.nl\/en\/new-2027-legislation-on-the-security-of-digital-products\/#primaryimage"},"image":{"@id":"https:\/\/thelegalcompany.nl\/en\/new-2027-legislation-on-the-security-of-digital-products\/#primaryimage"},"thumbnailUrl":"https:\/\/thelegalcompany.nl\/wp-content\/uploads\/2024\/12\/cyberveiligheid.jpg","datePublished":"2024-12-10T09:52:57+00:00","dateModified":"2026-09-02T07:17:46+00:00","author":{"@id":"https:\/\/thelegalcompany.nl\/en\/#\/schema\/person\/e93b72dbe66192effeea36c4c44d5b0e"},"breadcrumb":{"@id":"https:\/\/thelegalcompany.nl\/en\/new-2027-legislation-on-the-security-of-digital-products\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/thelegalcompany.nl\/en\/new-2027-legislation-on-the-security-of-digital-products\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/thelegalcompany.nl\/en\/new-2027-legislation-on-the-security-of-digital-products\/#primaryimage","url":"https:\/\/thelegalcompany.nl\/wp-content\/uploads\/2024\/12\/cyberveiligheid.jpg","contentUrl":"https:\/\/thelegalcompany.nl\/wp-content\/uploads\/2024\/12\/cyberveiligheid.jpg","width":2500,"height":1728},{"@type":"BreadcrumbList","@id":"https:\/\/thelegalcompany.nl\/en\/new-2027-legislation-on-the-security-of-digital-products\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/thelegalcompany.nl\/en\/"},{"@type":"ListItem","position":2,"name":"New 2027 Legislation on the Security of Digital Products"}]},{"@type":"WebSite","@id":"https:\/\/thelegalcompany.nl\/en\/#website","url":"https:\/\/thelegalcompany.nl\/en\/","name":"The Legal Company","description":"Juristen voor het bedrijfsleven","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/thelegalcompany.nl\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/thelegalcompany.nl\/en\/#\/schema\/person\/e93b72dbe66192effeea36c4c44d5b0e","name":"devteam","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/de35b4a8e5902644cd0a588c686c4a2f4afcbf52c653e97d48799a725fbaad23?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/de35b4a8e5902644cd0a588c686c4a2f4afcbf52c653e97d48799a725fbaad23?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/de35b4a8e5902644cd0a588c686c4a2f4afcbf52c653e97d48799a725fbaad23?s=96&d=mm&r=g","caption":"devteam"},"url":"https:\/\/thelegalcompany.nl\/en\/author\/devteam\/"}]}},"_links":{"self":[{"href":"https:\/\/thelegalcompany.nl\/en\/wp-json\/wp\/v2\/posts\/29571","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/thelegalcompany.nl\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/thelegalcompany.nl\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/thelegalcompany.nl\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/thelegalcompany.nl\/en\/wp-json\/wp\/v2\/comments?post=29571"}],"version-history":[{"count":1,"href":"https:\/\/thelegalcompany.nl\/en\/wp-json\/wp\/v2\/posts\/29571\/revisions"}],"predecessor-version":[{"id":29572,"href":"https:\/\/thelegalcompany.nl\/en\/wp-json\/wp\/v2\/posts\/29571\/revisions\/29572"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/thelegalcompany.nl\/en\/wp-json\/wp\/v2\/media\/24378"}],"wp:attachment":[{"href":"https:\/\/thelegalcompany.nl\/en\/wp-json\/wp\/v2\/media?parent=29571"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/thelegalcompany.nl\/en\/wp-json\/wp\/v2\/categories?post=29571"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/thelegalcompany.nl\/en\/wp-json\/wp\/v2\/tags?post=29571"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}