Cybersecurity

Bitkom on the Cyber Resilience Act

"Europe needs to put more focus on defending against cyber attacks. The Cyber Resilience Act can make an important contribution to strengthening the security of connected devices. Effective protection against cyber criminals is a prerequisite for bringing devices and technologies in the connected home to a new level of security. Crisis resistance has probably rarely been as important as it is today, and the Cyber Resilience Act comes at exactly the right time," explains Bitkom President Achim Berg, adding in an official commentary: "The Cyber Resilience Act creates significantly more security for consumers by legally stipulating security by design and guaranteeing updates for the lifecycle of the product.

Achim Berg, President, Bitkom

At the same time, however, it creates a great deal of bureaucracy for companies, including extensive documentation requirements. Bitkom is critical of the implementation period of 24 months after entry into force, which poses major challenges for many companies in view of the significantly longer development cycles. This makes it all the more important to keep the additional compliance costs that the Cyber Resilience Act will impose on companies as low as possible. This includes clear and unambiguous legislation. The Cyber Resilience Act must not lead to new legal uncertainty in companies - the General Data Protection Regulation should be a cautionary example here.