{"id":3266,"date":"2026-09-28T13:20:07","date_gmt":"2026-09-28T11:20:07","guid":{"rendered":"https:\/\/bauer.legal\/your-situation\/products-with-digital-elements-cra\/"},"modified":"2026-09-28T13:20:07","modified_gmt":"2026-09-28T11:20:07","slug":"products-with-digital-elements-cra","status":"publish","type":"page","link":"https:\/\/bauer.legal\/en\/your-situation\/products-with-digital-elements-cra\/","title":{"rendered":"Products with digital elements (Cyber Resilience Act)"},"content":{"rendered":"\n<p class=\"has-text-align-justify wp-block-paragraph\">Your company manufactures products with digital elements, i.e. connected devices or software, or it imports or distributes them. The Cyber Resilience Act sets new obligations for this.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" style=\"font-size:1.5rem\">What matters now<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Since 11 September 2026, reporting obligations apply to actively exploited vulnerabilities and severe security incidents; from 11 December 2027, all requirements apply.<\/li>\n\n\n<li>First clarify which products are covered and which role your company has: manufacturer, importer or distributor.<\/li>\n\n\n<li>Manufacturers need, among other things, a risk assessment, vulnerability handling, security updates over the support period and technical documentation.<\/li>\n\n\n<li>Contracts with suppliers and open source components belong in the review.<\/li>\n\n\n<li>The topic also touches product liability, which expressly covers software from December 2026.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\" style=\"font-size:1.5rem\">Documents I need<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li>a list of products and their digital components<\/li>\n\n\n<li>existing security and update processes<\/li>\n\n\n<li>contracts with suppliers and customers<\/li>\n\n\n<li>responsibilities within the company<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\" style=\"font-size:1.5rem\">Next steps<\/h2>\n\n\n\n<p class=\"has-text-align-justify wp-block-paragraph\">Send me the documents by email to <a href=\"mailto:kanzlei@bauer.legal\">kanzlei@bauer.legal<\/a> or use the <a href=\"https:\/\/bauer.legal\/en\/submit-appointment-request\/\">appointment request<\/a>, and mention any deadline that is running. I usually reply within one working day and let you know how things can proceed. You can write to me in English or German. How we work together and how fees are charged is explained under <a href=\"https:\/\/bauer.legal\/en\/how-we-work-together\/\">How we work together<\/a>.<\/p>\n\n\n\n<p class=\"has-text-align-justify wp-block-paragraph\">More: <a href=\"https:\/\/bauer.legal\/en\/information-technology-law-it-law\/\">IT law<\/a>, <a href=\"https:\/\/bauer.legal\/en\/deadlines-for-businesses\/\">Deadlines for businesses<\/a>.<\/p>\n\n\n\n<p class=\"bl-stand wp-block-paragraph\">This page gives a general overview of German law and does not replace advice on the individual case.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Your company manufactures products with digital elements, i.e. connected devices or software, or it imports or distributes them. The Cyber Resilience Act sets new obligations for this. What matters now Documents I need Next steps Send me the documents by email to kanzlei@bauer.legal or use the appointment request, and mention any deadline that is running.&hellip; <a class=\"more-link\" href=\"https:\/\/bauer.legal\/en\/your-situation\/products-with-digital-elements-cra\/\">Continue reading <span class=\"screen-reader-text\">Products with digital elements (Cyber Resilience Act)<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"parent":3224,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_editorskit_title_hidden":false,"_editorskit_reading_time":0,"_editorskit_is_block_options_detached":false,"_editorskit_block_options_position":"{}","footnotes":"","_genesis_title":"Cyber Resilience Act: products with digital elements","_genesis_description":"Your company manufactures, imports or sells hardware or software in the EU? What the Cyber Resilience Act requires and what matters now.","_tsf_title_no_blogname":0,"_genesis_noindex":0},"class_list":["post-3266","page","type-page","status-publish","hentry","entry"],"jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/bauer.legal\/en\/wp-json\/wp\/v2\/pages\/3266","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/bauer.legal\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/bauer.legal\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/bauer.legal\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/bauer.legal\/en\/wp-json\/wp\/v2\/comments?post=3266"}],"version-history":[{"count":0,"href":"https:\/\/bauer.legal\/en\/wp-json\/wp\/v2\/pages\/3266\/revisions"}],"up":[{"embeddable":true,"href":"https:\/\/bauer.legal\/en\/wp-json\/wp\/v2\/pages\/3224"}],"wp:attachment":[{"href":"https:\/\/bauer.legal\/en\/wp-json\/wp\/v2\/media?parent=3266"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}