Proposed EU Cybersecurity Rules Raise Concerns Among Electronics Manufacturers
Major electronics manufacturers, including Siemens, Ericsson, Schneider Electric, Nokia, Robert Bosch GmbH and industry group DigitalEurope, have expressed concerns about the potential disruptive effects of the proposed EU Cyber Resilience Act. These companies wrote a joint letter to European Union industry chief Thierry Breton and EU digital chief Vera Jourova.
The Act, introduced by the European Commission last year, looks to address cybersecurity risks in smart devices. It requires manufacturers, importers and distributors of internet-connected products to assess and mitigate cybersecurity risks for a period of five years or through the expected lifetime of their products.
The companies have voiced their apprehensions about the Act's current form, warning that it could create bottlenecks in supply chains that may disrupt the single market, similar to the disruptions witnessed during the COVID-19 pandemic. The impact of these rules is anticipated to extend to a broad spectrum of products, ranging from household appliances like washing machines and toys to critical components used in heat pumps, cooling machines and high-tech manufacturing.
One major concern raised by the electronics manufacturers is the potential shortage of independent experts available to conduct the required cybersecurity assessments, which could lead to significant delays in compliance with the regulations. In addition, the companies are calling for a reconsideration of the list of high-risk products covered by the rules, suggesting that it be significantly narrowed down.
The signatories of the letter have also suggested that manufacturers should be allowed to address known vulnerability risks without the need for extensive assessments. They are seeking more flexibility in self-assessment procedures, giving manufacturers greater control over tackling vulnerabilities in their products.
The letter from these industry leaders and DigitalEurope comes just ahead of negotiations scheduled for 8 November, where EU countries and lawmakers will work on finalising the details of the draft law before its potential adoption.
