The European Union's Cyber Resilience Act (CRA) is reshaping cybersecurity compliance for companies that develop and sell connected products and software. For U.S. companies, the CRA's reach can extend well beyond Europe: Products made available on the EU market may be subject to new requirements governing secure product design, cybersecurity risk assessments, vulnerability management, incident reporting, and security updates, among others. The compliance clock is already running, with the CRA's vulnerability and incident reporting obligations taking effect in September 2026, ahead of the broader requirements that apply beginning in December 2027.
In this webinar, Andrew Lewis from Davis Wright Tremaine and Tobias Rothkegel from Osborne Clarke will explain how the CRA applies to U.S. companies and what organizations should be doing now to prepare. The discussion will also examine the CRA's rapid incident and actively exploited vulnerability reporting requirements, including its 24- and 72-hour reporting framework, as well as how the CRA intersects with other European regulations. The program will provide U.S. companies with a practical roadmap for moving from CRA scoping to operational readiness before the broader regime takes effect.
PENDING CLE Credits: AK- 1.0 General credit; CA- 1.0 General credit; IL- 1.0 General Credit; NY- 1.0 Prof Prac; OR- 1.0; General Credit; TX- 1.0 General Credit; VA- 1.0 General Credit; WA- 1.0 Law and Legal Procedure Credit. All credits and credit types are pending and not guaranteed. This program is appropriate for both newly admitted and experienced New York Attorneys.
DWT seeks CLE accreditation in AK, CA, IL, NY, OR, TX, VA and WA. Upon request, if you are admitted to practice law in another state, we will provide a certificate of attendance and documentation to assist you in applying for CLE credit in your state of admission. Please email CLEreporting@dwt.com with questions.
This session will be recorded. Please review our privacy policy here.