Skip to content

Search

The Cyber Resilience Act Applies in Full · Chronopin

CybersecurityPosted 09/21/202609/21/2026 at 11:10 pm·@CyberDesk To timeline

European Commission

The Cyber Resilience Act Applies in Full

Starts 12/11/2027 - All day

Berlaymont, Rue de la Loi 200, 1049 Brussels, Belgium

Tags

Law
CE Marking
Cyber Resilience Act
European Union
Product Security
Thread

Comments

Fixed in the regulation, per the European Commission: "The main obligations introduced by the Act will apply from 11 December 2027", while the reporting obligations applied from 11 September 2026.^[1]

Start: Dec 11, 202775% CONFIDENCEfrom the source

The Cyber Resilience Act Applies in Full

Every obligation the Cyber Resilience Act carries comes into force: products with digital elements may only be placed on the EU market if they meet the Act's essential cybersecurity requirements, carry a conformity assessment and are supported with security updates for their declared support period.

This is the Act's main application date; only the reporting duties, live since 11 September 2026, ran ahead of it. [S]
From this day the CE mark on a connected product covers its cybersecurity, not only its electrical and radio safety. [S]
Manufacturers had three years and one month from entry into force to get there - the Act entered into force on 10 December 2024. [S]

0

References 283% CONFIDENCE

The first entry is always the pin's source. Overall confidence is a weighted average of how firmly each reference supports the start and end times used above; a reference counts half as much for every 180 days older than the newest.

[1]75%
digital-strategy.ec.europa.eu/en/policies/cyber-resilience-act
digital-strategy.ec.europa.eu· Posted Sep 21, 2026· Starts Dec 11, 2027 ✓· 50% of score
Fixed in the regulation, per the European Commission: "The main obligations introduced by the Act will apply from 11 December 2027", while the reporting obligations applied from 11 September 2026.
[2]90%
Safer and more secure digital products
commission.europa.eu· Added Sep 21, 2026· 50% of score
The Commission's September 2026 announcement states both phase dates, tying the full application date to the reporting phase that preceded it.^[1]

Suggest a correction

Something missing or wrong? Say it in your own words: a link that backs this pin up, a different start or end date and why, or a fact it lacks or gets wrong. The AI checks it against this pin's sources, searches for better ones, and adds any page that backs you up. The pin's own sources still count most.

Comments

Thread

Respond to this Pin

1The Cyber Resilience Act Starts Demanding Breach Reports
2The Cyber Resilience Act Applies in Full

More like this

Cybersecurity09/21/2026@CyberDesk
The Cyber Resilience Act Starts Demanding Breach Reports
Berlaymont, Rue de la Loi 200, 1049 Brussels, BelgiumEuropean Commission
Starts 09/11/2026SCHEDULED 85% CONFIDENCE12 days agoThe date is set by the regulation itself, per the European Commission: "New Cyber Resilience Act reporting obligations take effect on 11 September 2026".^[1]
The EU's Cyber Resilience Act reaches its first live phase: manufacturers of any product with digital elements sold in the EU must report actively exploited vulnerabilities and severe incidents to ENISA and their national CSIRT - an early warning within 24 hours, a full notification within 72, and a final report within 14 days.
0.75
AI09/20/2026@TechDesk
OpenAI Retires GPT-5.4-Cyber
OpenAISan Francisco, California, United States
Starts 10/01/2026SCHEDULED 80% CONFIDENCEin 8 daysOpenAI's^[1][2] own deprecation page, announced 2026-09-11, gives the shutdown date as 1 October 2026. A shutdown date is the vendor's commitment to developers and is occasionally pushed back, never brought forward.
OpenAI switches off GPT-5.4-Cyber on 1 October 2026; requests to them stop working and callers have to move to the named replacements. Going: gpt-5.4-cyber.
0.59
Infrastructure09/14/2026@BuildDesk
Tokyo Unveils $109BN Resilience Project
Tokyo Metropolitan Government Building, Shinjuku, Tokyo, JapanTokyo Metropolitan Government
Starts 12/15/2022CONFIRMED 77% CONFIDENCE3.8 years agoHappened as dated, per the source^[1]: "In December 2022, the Tokyo Metropolitan Government unveiled the Tokyo Resilience Project."
Tokyo's Metropolitan Government unveiled an 18-year, ¥17 trillion ($109BN) Resilience Project to fortify the city of 40 million against earthquakes, typhoons, tsunamis and volcanic activity.
$109B
0.59
AI09/19/2026@TechDesk
GPT-5 Instant Update Better Supports People in Distress
OpenAI
Starts 10/03/2025 CONFIRMED 95% CONFIDENCE355 days agoOpenAI's^[1] own model release notes date this entry October 3, 2025
OpenAI updates GPT-5 Instant to better recognize and support people showing signs of mental and emotional distress.
0.58
AI09/23/2026@TechDesk
Microsoft's Fairwater AI Datacenter in Wisconsin Becomes Fully Operational
Microsoft…Microsoft Fairwater AI Datacenter, Mount Pleasant, Racine County, Wisconsin, United States
Starts 06/23/2026CONFIRMED 88% CONFIDENCE92 days agoMicrosoft's^[1][4][5] press release dated June 23, 2026 says the company "on Tuesday announced that it has completed construction of its first datacenter facility in the Village of Mount Pleasant, after bringing equipment online and conducting startup activities in April. The facility is now fully operational."
Microsoft's first datacenter in Mount Pleasant, Wisconsin, a single cluster of NVIDIA GB200 servers it calls the world's most powerful AI supercomputer, is fully operational after its equipment came online in April.
$3.3B
0.58
Conference09/23/2026@TechDesk
AWS re:Invent 2026 Opens in Las Vegas
Amazon…The Venetian Las Vegas, 3355 South Las Vegas Boulevard, Paradise, NV 89109, United States
11/30/2026 - 12/04/2026SCHEDULED 81% CONFIDENCEin 68 daysAWS's re:Invent page says "Join us Nov. 30 – Dec. 4 in Las Vegas for cloud and AI's biggest week" (title: "Nov 30-Dec 4, Las Vegas"), a fixed official schedule for an upcoming event.^[1]
AWS's annual cloud and AI conference fills six Las Vegas venues from Nov 30 to Dec 4 with more than 2,200 sessions, led by CEO Matt Garman's opening keynote at The Venetian on Dec 1. For 2026 the re:Inforce security conference is part of the week.
0.58
Energy09/23/2026@EnergyDesk
Babcock & Wilcox Signs 1 GW Data Center Power Deal With Applied Digital
Babcock & Wilcox…Center, Oliver County, North Dakota, United States
Starts 11/04/2025 10:28PMCONFIRMED 89% CONFIDENCE323 days agoStated as done, per babcock.com^[1][6]: "(AKRON, Ohio - November 4, 2025) - Babcock & Wilcox ... announced today that it has ... [signed] an agreement for a limited notice to proceed"; the Business Wire copy on Yahoo Finance is timestamped 22:28 UTC and the SEC^[2][3][5] 8-K was accepted at 17:31 ET.
Babcock & Wilcox signed a limited notice to proceed on a project valued at over $1.5 billion to design and install four 300 MW gas-fired boiler and steam turbine plants for an Applied Digital AI Factory, its entry into AI data-centre power.
$1.5B
0.57
Law06/15/2017@ThePinGang
California Law Now Requires All Smartphones to Have Built-In Kill Switches By July 2015
Starts 07/31/2015 UNVERIFIED 27% CONFIDENCE11.1 years ago
A California bill requiring all smartphones sold in the state to have antitheft technology installed was today signed into law by California governor...
0.57
Infrastructure09/14/2026@BuildDesk
NIED's Large-Scale Rainfall Simulator Opens in Tsukuba
Tsukuba, Ibaraki Prefecture, JapanNational Research Institute for Earth Science and Disaster Resilience
Starts 03/01/1974CONFIRMED 91% CONFIDENCE52.6 years agoHappened as dated, per the source^[1]: "The facility was established in 1974, following a series of destructive typhoons."
Japan's National Research Institute for Earth Science and Disaster Resilience completed its hangar-sized Large-Scale Rainfall Simulator in Tsukuba, letting scientists recreate extreme storms on demand to study landslides and flooding.
0.57
Software09/23/2026@TechDesk
AWS Wins NATO RESTRICTED Approval Across All 32 Allies
410 Terry Avenue North, South Lake Union, Seattle, WA 98109, United StatesAmazon…
Starts 09/22/2026CONFIRMED 84% CONFIDENCE1 day agoThe Amazon^[2] News post (article:published_time 2026-09-22) says "Amazon Web Services (AWS) announced that it is the first cloud provider to have its cloud capabilities approved for use by all ... NATO member nations", and Defense One^[4] confirms "The company announced on Tuesday" (22 September 2026).
AWS became the first cloud provider approved to handle NATO RESTRICTED information for every member nation, after Spain's National Cryptographic Centre assessed it against NATO's D32 cloud directive. Allies can now run NR workloads in any AWS Region located in a NATO country.
0.57
Automotive09/23/2026@TechDesk
NHTSA Opens an Audit of the Cybercab's Safety Self-Certification
1200 New Jersey Avenue Southeast, Washington, District of Columbia 20003, United StatesTesla…
Starts 09/03/2026CONFIRMED 88% CONFIDENCE20 days agoNHTSA's^[1][2] special order states: "On September 3, 2026, NHTSA opened Audit Query (AQ) 26002 to evaluate Tesla's basis for certifying that its Cybercab vehicle complies with all applicable FMVSS." No time of day is given, so the pin is all day.
NHTSA opened Audit Query AQ26002 on 3 September 2026 to test how Tesla certified the Cybercab, which has no steering wheel, pedals or mirrors, as meeting federal motor vehicle safety standards.
0.56
Cybersecurity09/23/2026@CyberDesk
Microsoft's September 2026 Patch Tuesday Fixes a Record 966 Flaws
Microsoft…One Microsoft Way, Redmond, United States
Starts 09/08/2026 5:00PMCONFIRMED 87% CONFIDENCE15 days agoStated as firm, per bleepingcomputer.com^[1] (8 September 2026): "Today is Microsoft's^[6] September 2026 Patch Tuesday"; the time is Microsoft Learn's "second Tuesday of each month, typically at 10:00 AM Pacific Time", 17:00 UTC under daylight time.
Microsoft's largest security update ever patches 966 vulnerabilities, including two Windows privilege-escalation zero-days already exploited in attacks and 105 rated Critical.
0.56