The EU Cyber Resilience Act is introducing a tight reporting deadline for product security incidents. According to Dark Reading, starting Friday, European organizations must notify EU authorities within 24 hours of discovering a serious incident.
The rule applies to organizations in Europe and focuses on incidents involving products with digital elements. The short window signals a push for faster disclosure, though the source does not detail penalties or exceptions.
This is the first major enforcement step for the Act's reporting provisions, and organizations should review their incident response procedures to meet the new timeline.