Cyber Resilience Act: Vulnerability and incident reporting obligations apply
Tech · Compliance deadlines · Fri, September 11, 2026 · European Union
Art 14: manufacturers must report actively exploited vulnerabilities and severe incidents (24-hour early warning, 72-hour notification) via the single reporting platform. Also covers products placed on the market before Not legal advice.
Every year
| Date | Event | When |
|---|---|---|
| Tue, Dec 10, 2024 | Cyber Resilience Act: CRA enters into force | 2 yr ago |
| Thu, Jun 11, 2026 | Cyber Resilience Act: Conformity assessment body provisions apply | 3 mo ago |
| Fri, Sep 11, 2026 | Cyber Resilience Act: Vulnerability and incident reporting obligations apply | 14 days ago |
| Sat, Dec 11, 2027 | Cyber Resilience Act: CRA fully applies | in 15 mo |
| Sun, Jun 11, 2028 | Cyber Resilience Act: Legacy type-examination certificates expire | in 2 yr |
| Mon, Sep 11, 2028 | Cyber Resilience Act: Report on single reporting platform | in 2 yr |
| Wed, Dec 11, 2030 | Cyber Resilience Act: First CRA evaluation | in 4 yr |
Also on Sep 11, 2026
| Date | Event | When |
|---|---|---|
| Fri, Sep 11, 2026 | 2026 Solheim Cup | 14 days ago |
| Fri, Sep 11, 2026 | 2026 World Athletics Ultimate Championship | 14 days ago |
| Fri, Sep 11, 2026 | NFL Melbourne game 2026: 49ers vs Rams | 14 days ago |
| Fri, Sep 11, 2026 | 250th anniversary: British and American leaders held a peace conference on Staten Island, New... | 14 days ago |
| Fri, Sep 11, 2026 | CPI release for August 2026 | 14 days ago |
| Fri, Sep 11, 2026 | South Korea PIPA: 2026 PIPA amendments take effect | 14 days ago |
Source, method and history
- Source
- Regulations
- How we know
- From the Regulations API (regulations.fru.dev), which cites the official text.
- Recurs
- one-off
- More on fru.dev
- regulations.fru.dev
- Feed
- Subscribe to Compliance deadlines
- Changes
- 2026-09-25: added to 2026-09-11