Dispatches
CRA Article 14 defines the reporting clock. But another interval matters first: how long does it take an organisation to recognise that an ordinary operational signal may have become a regulatory question?
A hospital fire reveals how individually governed systems can create combined safety conditions. What Turku teaches us about Product Integrity, evidence, system interaction and the revised EU Product Liability Directive.
A legacy recall still in service, certified safety footwear failing market checks, and a new cyber reporting clock all expose the same weakness: controls must continue to work.
EU-27 implementation of Directive (EU) 2024/2853 is moving further into formal legislative machinery. September status: 3 adopted/notified, 7 parliamentary/draft, 11 pipeline active, and 6 with no public legislative step identified.
Connected products do not remain in one cybersecurity state. Updates, dependencies, support conditions and installed-base divergence mean assurance must be governed throughout the lifecycle
Products now move globally with extraordinary ease. Consumer protection does not. This article examines what that gap means for families, governments, businesses and the people quietly working to make product safety real.
From 11 September 2026, the Cyber Resilience Act begins creating a timed regulatory record of what manufacturers know about actively exploited vulnerabilities and severe security incidents. That evidence may later matter far beyond cybersecurity compliance.
The internal translation layer: where product safety signals become organisational decisions
EU-27 implementation of Directive (EU) 2024/2853 is moving into formal legislative machinery. August status: 3 adopted/notified, 6 parliamentary, 12 pipeline, and 6 with no public legislative step identified.
Public product safety data reveals formal action, but not every weak signal, unresolved investigation or hidden risk that preceded it.
Before a public alert appears, organisations must detect, interpret, escalate and classify emerging product safety signals. This article examines how that journey works across the EU, Great Britain and Northern Ireland.
A data centre can have world-class redundancy and still lack a complete account of what actually existed when something went wrong.