Phish and Chips: The regulatory approaches of the EU Cyber Resilience Act

• Register
• Add to calendar

Abstract

This lecture aims to clarify the foundational regulatory choices of Regulation (EU) 2024/2847 (Cyber Resilience Act, CRA), concerning horizontal cybersecurity requirements for products with digital elements.

Like other legal acts of the European Union, particularly those dealing with the regulation of the ‘digital’ sphere, the CRA combines several regulatory approaches, namely: (i) a horizontal approach; (ii) a risk-based approach; and (iii) a product safety approach. In addition, the European Commission’s Explanatory Memorandum accompanying the proposed Regulation explicitly states that the CRA contributes to the protection of fundamental rights. While the combination of certain approaches has a longer tradition within EU harmonized law (e.g., the risk-based and product safety approaches) and is therefore less problematic, the integration of a rights-based approach into the traditional structures of product safety legislation is a recent development in the EU’s legislative technique and thus deserves a deeper critical reflection.

About the speaker

Pier Giorgio is an assistant Professor junior (ricercatore t. d. a) of the School of Law and CIRSFID – ALMA AI Center at the University of Bologna.

Language

English.

This is a free hybrid event. Registration is mandatory.

The event will run from 12.30 until 14.00. A cold lunch will be offered from 12.00.

• Find out more about the Chair in Cyber Policy
• Subscribe to the Chair’s newsletter