Cyber Resilience Act

EN Texto em inglês Ainda não há artigo no seu idioma: trecho em inglês.

The Cyber Resilience Act (CRA) is an EU regulation for improving cybersecurity and cyber resilience, through common cybersecurity standards for products that have digital elements. For example, it requires incident reports and automatic security updates. Digital elements are, mainly, hardware and software whose "intended and foreseeable use includes direct or indirect data connection to a device or network". The European Commission proposed the CRA on 15 September 2022. Subsequently, multiple FOSS organizations criticized the CRA for creating a "chilling effect on open source software development". After a series of amendments, the European Commission reached political agreement on the CRA on 1 December 2023. The revised bill includes an exception for open-source software. This was welcomed by many open source organizations, though Debian criticized its effect on small businesses and redistributors. The revised bill also introduced the "open source steward", a new economic concept. The European Parliament formally approved the CRA in March 2024. It was adopted by the Council on 10 October 2024.