September 15, 2022
EU wants to toughen cybersecurity rules for smart devices
The European Union's executive arm proposed new legislation Thursday that would force manufacturers to ensure that devices connected to the internet meet cybersecurity standards, making the 27-nation bloc less vulnerable to attacks.
The EU said a ransomware attack takes place every 11 seconds, and the global annual cost of cybercrime is estimated at 5.5 trillion euros in 2021.
The European commission said an increase of cyberattacks was witnessed during the coronavirus crisis, while Russia's war in Ukraine has raised concerns that European energy infrastructure could also be targeted amid a global energy crunch.
The law, proposed to be called the Cyber Resilience Act, aims at taking off the EU market all products with digital elements that are not well enough protected.
The Commission said the law will not only reduce attacks but also benefit consumers since it will improve data and privacy protection
"When it comes to cybersecurity, Europe is only as strong as its weakest link, be it a vulnerable member state or an unsafe product along the supply chain," said Thierry Breton, the EU commissioner for the internal market.
"Computers, phones, household appliances, virtual assistance devices, cars, toys… each and every one of these hundreds of millions of connected products is a potential entry point for a cyberattack."
Breton said most hardware and software products are currently not subject to any cybersecurity obligations.
If adopted, the regulation will require manufacturers to take into account cybersecurity in the design and development of their devices. And businesses will remain responsible for their security throughout the products' expected lifetime, or a minimum of five years.
Market authorities will have the power to withdraw or recall non-compliant devices and to fine companies that will not abide by the rules.
© 2022 The Associated Press. All rights reserved. This material may not be published, broadcast, rewritten or redistributed without permission.