The Cyber Resilience Act (Regulation (EU) 2024/2847) sets cybersecurity rules for products with digital elements placed on the EU market. Reporting duties start 11 September 2026; the full obligations and CE marking apply from 11 December 2027. This check is a plain-English starting point — not legal advice. Your answers stay in your browser.