The European Commission just implemented mandatory reporting rules under the Cyber Resilience Act. Here's what it means for tech manufacturers, digital suppliers, and EU compliance teams.

1️⃣ European Commission — Cyber Resilience Act Reporting Obligations Take Effect
The European Commission launched mandatory reporting rules under the Cyber Resilience Act to boost digital product security standards.
This regulatory update impacts manufacturers, importers, and distributors of software and connected hardware across EU markets.
Obligated entities must build vulnerability reporting channels and adopt early disclosure processes to maintain statutory compliance.

2️⃣ CNIL — EUR 300,000 Fine Imposed on EXTIA for Data Rights Breaches
France's data agency fined IT firm EXTIA EUR 300,000 for failing to respect individual data access rights under GDPR rules.
The penalty targets corporate entities failing to handle data access requests and internal data protection governance standards.
Firms must audit subject access request workflows and upgrade data systems to prevent severe regulatory enforcement actions.

🛡️ 3️⃣ BSI — Cyber Resilience Act Reporting Obligations Start in Germany
Germany's Federal Office for Information Security announced the official start of Cyber Resilience Act reporting rules nationwide.
The mandate applies to German makers of digital goods, IT security managers, and key infrastructure operators across sectors.
Firms must align incident reporting frameworks with federal portals to meet strict statutory deadline requirements.

4️⃣ AFCA — Court Fines Messezentrum Salzburg EUR 65,000 for Antitrust Breach
The Austrian competition regulator obtained a EUR 65,000 fine against Messezentrum Salzburg GmbH in antitrust proceedings.
This judicial penalty affects venue operators, trade fair organizers, and commercial business entities in Austrian markets.
Businesses should review commercial contracts and pricing practices to avoid anti-competitive violations and antitrust fines.

5️⃣ ACM — Mandatory Stop to Fake Price Comparators for Energy Suppliers
The Dutch Authority for Consumers and Markets ordered energy suppliers to immediately stop using fake price comparison tools.
The enforcement action impacts retail energy suppliers, price comparison sites, and utility marketing teams.
Suppliers must adjust tariff display tools and ensure total transparency in all automated price calculation tools.

Full analysis in the attached RegNext Daily Europe Radar carousel.

— Elena Navarro · Managing Editor, RegNext
Daily Europe Radar · Friday 11 Sep 2026
#EURegulation #UKRegulation #FinancialRegulation #ComplianceIntelligence