Afghanistan: Technology

Starting September 11, 2026, manufacturers of digital products in the EU must report cybersecurity vulnerabilities and incidents within strict 24-hour and 72-hour deadlines under the new Cyber Resilience Act. Companies face penalties up to €15 million or 2.5% of global turnover for non-compliance, requiring immediate preparation of incident response procedures and assessment of product portfolios to meet these unprecedented product-focused cybersecurity obligations.

The European Parliament's draft report proposes over 130 amendments to the Commission's plan for overhauling medical device regulations, introducing new categories like "niche" devices while expanding coordination mechanisms between EU authorities. These changes aim to balance regulatory simplification with patient safety, potentially reshaping how medical devices and in vitro diagnostics are classified, assessed, and brought to market across the European Union.

Some deadlines have shifted. The high-risk classification architecture has narrowed. New alignment with the Cyber Resilience Act and sectoral legislation brings welcome clarity. But the compliance clock has not stopped.