Berlin, 15 September 2022 - The EU today presented the Cyber Resilience Act, which aims to improve the security of IoT devices. Bitkom President Achim Berg explains:
"Europe needs to put more focus on defending against cyber-attacks. The Cyber Resilience Act can make an important contribution to strengthening the security of connected devices. Effective protection against cyber criminals is a prerequisite for bringing devices and technologies in a connected home to a higher level of security. Crisis resilience has rarely ever been more important than today, so the Cyber Resilience Act comes at just the right time.
The Cyber Resilience Act creates significantly more security for consumers by introducing the obligation of security by design and guaranteeing updates for the life cycle of the product. However, it also increases the administrative burden for companies, for example by comprehensive documentation obligations.
Bitkom is critical of the implementation period of 24 months after entry into force, which poses a great challenge to many companies as development cycles are significantly longer. It is therefore important to keep the additional compliance costs that the Cyber Resilience Act will impose on companies as low as possible. This also includes clear and unambiguous legislation. The Cyber Resilience Act must not lead to new legal uncertainty in companies - the General Data Protection Regulation should be seen as cautionary example."