If your product has digital elements and ships to the EU, the Cyber Resilience Act applies to you. From 11 September 2026, manufacturers must issue an early warning within 24 hours and a full report within 72 hours of discovering an actively exploited vulnerability or severe incident. Full compliance, including CE marking, is due by December 2027. Penalties run up to €15 million or 2.5% of global revenue — and the rules apply to non-EU manufacturers the moment their product enters the EU market. FeAce's take: …