EU Cyber Resilience Act Mandates 24-Hour Reporting for Product Security Incidents

Starting Friday, European organizations will be required to notify the EU government within 24 hours of discovering serious product security incidents. This requirement is being enforced under the EU Cyber Resilience Act. The new reporting timeframe applies to organizations operating in Europe when they identify serious security incidents related to products.