Abstract: This practical compliance handbook provides an 18-month execution roadmap for hardware and software manufacturers under Regulation (EU) 2024/2847 (Cyber Resilience Act). It clarifies the scope of Products with Digital Elements (PwDE), outlines the secure-by-design lifecycle obligations, and establishes compliance workflows for mandatory 24-hour early warning and 72-hour detailed incident reporting via ENISA's Single Reporting Platform starting September 11, 2026. The guide incorporates Romania-specific enforcement guidance through DNSC and CYBERFORT, Software Bill of Materials (SBOM) generation standards, and conformity assessment checklists.
What Every EU Company Needs to Know Before September 2026. Free Guide by Mararu & Mararu Lawyers • March 2026
Many organisations still think the Cyber Resilience Act (Regulation (EU) 2024/2847) is a “2027 problem”. The reality is far more urgent.
From 11 September 2026 – only six months from now – every manufacturer of products with digital elements must report actively exploited vulnerabilities and severe security incidents through ENISA’s Single Reporting Platform. Deadlines are strict: 24-hour early warning + 72-hour detailed notification.
The CRA (Regulation (EU) 2024/2847) mandates secure-by-design, lifecycle vulnerability handling, CE marking, and full transparency.
This free guide from Mararu & Mararu Lawyers gives you exactly what you need right now: plain-language explanations, a practical checklist roadmap, Romania-specific guidance, and the most common pitfalls to avoid.
The CRA (Regulation (EU) 2024/2847) is a Regulation – directly applicable in every Member State, including Romania, with fines up to €15 million or 2.5% of global turnover.
Romania is actively leading CRA implementation. The CRA EUROPE 2026 conference (Bucharest, March 2026) brought together 150+ European leaders.
.svg)
Commercial Earth-observation data rights cross UN principles, EU dual-use export rules, GDPR, the Data Act, AI Act, and the EU Space Act. This white paper guides operators, buyers, investors and insurers in mitigating and managing complex licensing, title, and export risks.
Historic space objects already sit under jurisdiction, ownership and due regard. The task is to give operators predictable parameters for working near them, not to freeze exploration. This article maps OST Articles II, VIII and IX, Artemis Accords Section 9, national licensing practice, and the proposed EU Space Act, and sets out steps available now.
Navigating Romania's aerospace, defense, dual use, and space programs requires understanding six overlapping legal regimes. This guide maps these regulatory frameworks and offers practical FDI and procurement compliance scenarios for investors.
