New national act on cyber resilience enters into force on 1 June – vulnerabilities must be reported to Traficom from autumn onwards

For the first time, the Cyber Resilience Act introduces product-level cybersecurity requirements for software and hardware placed on the EU market. A national act supplementing the EU regulation enters into force on 1 June 2026 and sets out the procedures to be followed in Finland. It also supplements provisions concerning domain names.