A smartwatch, a router, an industrial PLC, and even a cloud API: very different products, but with something in common. They could all fall within the scope of the Cyber Resilience Act.
For an initial assessment, just ask three questions.
Does the product contain digital elements?
Is it made available on the European Union market in the course of a commercial activity?
Can it exchange data with another device or a network?
If the answer to all three questions is yes, then the CRA applies.
