| Re: [open-regulatory-compliance] Draft Technical Descriptions |
Thanks for sharing your insights Tobie. Much appreciated. Many of the product listed in Annex I and Annex II depend on “Web Service API’s” to function, for example: 17. Smart home products with security functionalities, including smart door locks, security cameras, baby monitoring systems and alarm systems Does this example imply that the Web Service API’s used by these devices are also in scope for the EU CRA requirements? Thanks for your help in understanding these details. Thanks, Dick Brooks
Active Member of the CISA Critical Manufacturing Sector, Sector Coordinating Council – A Public-Private Partnership Never trust software, always verify and report! ™ Risk always exists, but trust must be earned and awarded.™ https://businesscyberguardian.com/ Email: dick@xxxxxxxxxxxxxxxxxxxxxxxxx Tel: +1 978-696-1788 From: Tobie Langel <tobie@xxxxxxxxxxxxxx> Thanks for your question, Dick. The product categories listed in this draft regulation are only for important and critical categories. Most products that are in scope of the CRA are actually not part of those two categories. I opened an FAQ on the topic here: https://github.com/orcwg/cra-hub/issues/166. Additionally, wrt your question about Web APIs, it depends whether they're part of the remote data processing solutions of products who are in scope of the CRA (in which case they're also in scope, see FAQ tmp-2) or not (in which case they're not in scope, see FAQ tmp-156). Hope this helps. --tobie On Fri, Mar 14, 2025 at 6:56 PM Dick Brooks via open-regulatory-compliance <open-regulatory-compliance@xxxxxxxxxxx> wrote:
|
