In brief: From 11 September 2026, additional cybersecurity obligations under NIS2, the Cyber Resilience Act and the Machinery Regulation will apply to manufacturers and operators in the EU.
In the coming weeks and months — including from 11 September 2026 — manufacturers and companies in Europe will face several EU-wide regulated cybersecurity obligations. These involve requirements from NIS2, the Cyber Resilience Act (CRA) and the Machinery Regulation.
The article by BornCity points to an upcoming deadline on 11 September 2026, from which concrete cybersecurity obligations will apply to manufacturers and operators in the EU. These arise from the interplay of three regulatory frameworks: the NIS2 Directive, the Cyber Resilience Act, and the new Machinery Regulation. The author relies on information provided to him by the operator of a corresponding information website. Specific details, fine amounts, or affected product categories are not further specified in the original article.
For compliance officers, this creates the need to assess the overlaps between the three regulatory frameworks at an early stage. NIS2 primarily addresses operators of critical and important entities and their risk management, the Cyber Resilience Act targets manufacturers of products with digital elements and requires security measures across the entire product lifecycle, while the Machinery Regulation governs safety requirements for machinery, including cybersecurity aspects. Companies that are simultaneously manufacturers and operators must fulfil obligations from multiple legal acts in parallel.
In practical terms, this means compliance teams need to determine well ahead of the stated deadline which of their own products and processes fall under which regulatory framework, and prepare the corresponding documentation and evidence obligations. The original article refers to the mentioned external information website for further details, without reproducing its contents in detail.
Source: borncity.com · Published 4 August 2026
Lumi AI News — AI-assisted curation pursuant to Art. 50 EU AI Act. Paraphrasing and classification by Lumi News Pipeline v1.8.3.