The EU Cyber Resilience Act and what it means for Japanese OEMs

The EU Cyber Resilience Act applies in full from 11 December 2027. It requires that a machine placed on the European market can be updated securely for years after it is sold, and that the manufacturer can show it was done. This session explains the regulation from the ground up, then covers the two capabilities that follow from it: over-the-air firmware updates to the machine controller, and AI access to machine data.

Wednesday, October 21, 2026

15:30 JST / 8:30 CEST

Save your seat

Can’t make the date? Register anyway. The recording goes to everyone who signs up.

WHY THIS APPLIES TO YOU

Three dates, one obligation that does not transfer

11 September 2026 – reporting duties for actively exploited vulnerabilities take effect.
20 January 2027 – the EU Machinery Regulation (EU) 2023/1230 makes cybersecurity an essential health and safety requirement.
11 December 2027 – the Cyber Resilience Act applies in full.

The CRA binds the manufacturer – not the importer, not the distributor, not the company operating the machine. Among the obligations: distributing security updates across the support period you declare, and being able to evidence it. Building the machine in Japan doesn't change any of that.