Prominent industry organizations warn that EU regulations aimed at addressing cybersecurity concerns related to smart devices might disrupt supply chains, similar to what occurred during the pandemic.
Leading electronics manufacturers like Siemens, Ericsson, and Schneider Electric, along with industry group DigitalEurope, have raised concerns about proposed EU rules focusing on the cybersecurity risks of smart devices. They argue that these regulations could disrupt supply chains similarly to the disruptions experienced during the pandemic.
The Cyber Resilience Act, proposed by the European Commission, mandates that manufacturers evaluate and address the cybersecurity risks of their products for five years or the expected product lifetime. These rules would also impact importers and distributors of internet-connected devices. These concerns arise amid a rise in cybersecurity incidents where hackers have targeted businesses and demanded large ransoms.
The CEOs of major companies, including Siemens, Ericsson, Schneider Electric, Nokia, Robert Bosch, and ESET, have expressed their concerns in a joint letter to top European Union officials about proposed EU cybersecurity rules. They fear that these regulations, in their current form, could create significant disruptions in the single market and impact various products, from household appliances to high-tech manufacturing components.
The companies worry about potential bottlenecks, primarily due to a shortage of independent experts to carry out required assessments and the associated bureaucratic processes. These disruptions could resemble the supply chain issues experienced during the COVID-19 pandemic, harming the single market and the competitiveness of businesses.
To address these concerns, the companies propose reducing the list of higher-risk products affected by the rules. They also advocate allowing manufacturers to address known vulnerabilities without prior assessments and seek greater flexibility in self-assessing cybersecurity risks.
This letter arrives ahead of negotiations scheduled for November 8 between EU member states and lawmakers to finalize the details of the draft law before its potential adoption.