In brief: From 11 September 2026, manufacturers and businesses in the EU will face additional cybersecurity obligations arising from NIS2, the Cyber Resilience Act and the Machinery Regulation.
In the coming weeks and months, manufacturers and companies in Europe will be subject to several EU-wide cybersecurity obligations – including from 11 September 2026. These affect requirements arising from NIS2, the Cyber Resilience Act (CRA) and the Machinery Regulation.
The article from BornCity points to an upcoming deadline on 11 September 2026, from which specific cybersecurity obligations will apply to manufacturers and businesses in the EU. These arise from the interplay of three sets of rules: the NIS2 Directive, the Cyber Resilience Act, and the new Machinery Regulation. The author bases this on information provided by the operator of a corresponding information page. Specific details, fine amounts, or affected product categories are not further specified in the original article.
For compliance officers, this creates a need to assess the overlaps between the three sets of rules at an early stage. NIS2 primarily addresses operators of critical and important entities and their risk management, the Cyber Resilience Act targets manufacturers of products with digital elements and requires security requirements across the entire product lifecycle, while the Machinery Regulation governs safety requirements for machinery, including cybersecurity aspects. Companies that are both manufacturers and operators must fulfil obligations from multiple legal acts in parallel.
In practical terms, this means compliance teams need to check well ahead of the stated deadline which of their own products and processes fall under which set of rules, and prepare the corresponding evidence and documentation obligations. For further details, the original article refers to the external information page mentioned, without reproducing its content in detail.
Source: borncity.com · Published 4 August 2026
Lumi AI News — AI-assisted curation pursuant to Art. 50 EU AI Act. Paraphrasing and classification by Lumi News Pipeline v1.8.3.