CRA: ZVEI Calls for Expert and Comprehensive Market Surveillance

The draft bill for the German implementing law of the EU Cyber Resilience Act (CRA) clarifies future supervisory structures. However, it is also evident that, in order for the CRA to be effective in practice, it requires expert market oversight that is free from conflicts of interest. This includes ensuring that the BSI has adequate staffing and resources.Regardless of national implementation, adjustments are needed. Non-critical products without a relevant cybersecurity risk should be excluded from the scope of application. We also call for documentation requirements to be simplified for the majority of products.

The full ZVEI position on the draft bill is available to download here (German).