September 2026 change log

Four dates that can change a connected or physical-product launch plan.

Change notes separate a legal application date from the earlier engineering, documentation and operating work needed to meet it.

Sources checked 22 September 2026

Now

CRA incident reporting applies

Since 11 September 2026, manufacturers must report actively exploited vulnerabilities and severe incidents affecting products with digital elements through the Single Reporting Platform. The early warning can be due within 24 hours.

European Commission · CRA reporting

11 Dec 2027

CRA main obligations apply

Connected-product teams need product-security requirements, vulnerability handling and lifecycle support in the roadmap well before the application date. Reporting duties have already started earlier.

European Commission · Cyber Resilience Act

20 Jan 2027

Machinery Regulation becomes mandatory

Machinery placed on the market before that date remains under the current Directive; new launch plans crossing the date should map the Regulation, including software, cyber-safety and digital documentation implications.

European Commission · Machinery

Guidance

GPSR business guidance is available

The Commission guidance explains manufacturer, importer, distributor, responsible-person and marketplace roles, including distance-sale information and corrective-action duties. Use it to audit role assumptions and product pages.

EUR-Lex · GPSR business guidelines

Founder action

What to change in the launch plan

1Add CRA incident ownership and escalation to connected-product operations now.
2Map 2027 application dates against design freeze, testing and inventory—not only launch day.
3Review whether product, software or claims changes create a new or modified route.
4Update online-offer, economic-operator and recall procedures against the GPSR guidance.

Reading boundary

This is a selected change log for common Founder Hub categories, not a complete legal update service. Applicability depends on the product, role, market and placement date. Verify the official text and obtain expert review for a product-specific decision.

Check my product-specific route