On February 16, 2026, the European Commission adopted the initiative to adopt the Cyber Resilience Act (CRA) as an alternative to the Cybersecurity Authorization Regulation (EU) 2022/30. On April 29, 2026, the Commission officially issued the new Delegated Regulation (EU) 2026/339, which replaces Regulation (EU) 2022/30 effective December 11, 2027.

Click this link to view the original delegated regulation.