[open-regulatory-compliance] Update on reporting obligations for open so

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [List Home]

[open-regulatory-compliance] Update on reporting obligations for open source software stewards

From: Juan Rico <juan.rico@xxxxxxxxxxxxxxxxxxxxxx>
Date: Fri, 4 Sep 2026 22:00:24 +0200
Arc-authentication-results: i=1; mx.google.com; arc=none
Arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=to:subject:message-id:date:from:mime-version:dkim-signature; bh=GEsfZ0mCWN0nvv9zVwBIKjVMJc6j5gvqNk6GPoRp3c0=; fh=SCfeUaMlYc9/iNAUMxpUglgsJjMoeGKGo7vVVMAVqg8=; b=UVGW6ff6p5uREfXogQBuiqiPY093q2lhWa6BCgG4gE1gAHBCvejgLDqRwQLlSE+qW6 DxfT99eniCsRk7SDJcruUwNNOW8DdpwTD4aMZ4B1DBlgbwM5bUclcbgVF/6aGvodHrrD NipKhwhnFryD69D3aUOyi3sVcHJD2ielFfAvHANz7QTPt1ibWpfGjpg00RtiJPXOfs7m 9yOGB38w1zNu+PXJF1Mql7q4x0335grA2b4wK6Da5K5OD0VulefNdCMPoKkQ5l/+65iB O0DI0c+9cD4MdLOMbb3apQoWqwKoDyCYGwWn7nOwcIHTJt162K9qoSv1QIeeGDe21piF g7CA==; darn=eclipse.org
Arc-seal: i=1; a=rsa-sha256; t=1788552036; cv=none; d=google.com; s=arc-20260327; b=VBHaUOVbBl88SUP5uvetaO1XMsu3fuZRaGffhF2SbAfp2mcnNyR66TpS9l7WRE/tz6 nUz8lD244Q8/2GkJU6XJ+ZwHE0anXIbRpDb/a15FI/2BvZQvwiMwYFEJKHqI105yaEOW P/B6b6HevpBVP3sT3ebsyrzcySNOhqKIRgZo7AIxavTKDsuMyaXPHqa5N/5z5crc+934 gV+psu1Y/ppjybE48vwWjYj8ajYFrTPGa7cx3jS9lRgvOitFUi+dP43HSREWXB1uzjfz wslRyj/12vuVT3MHgNd1ty1WER1RH0dwcv0V2va9e3Yu/qO6CKJXYJzxRs2b/6wJAR8D 9jjg==
Delivered-to: open-regulatory-compliance@xxxxxxxxxxx
List-archive: <https://www.eclipse.org/mailman/private/open-regulatory-compliance/>
List-help: <mailto:open-regulatory-compliance-request@eclipse.org?subject=help>
List-subscribe: <https://www.eclipse.org/mailman/listinfo/open-regulatory-compliance>, <mailto:open-regulatory-compliance-request@eclipse.org?subject=subscribe>
List-unsubscribe: <https://www.eclipse.org/mailman/options/open-regulatory-compliance>, <mailto:open-regulatory-compliance-request@eclipse.org?subject=unsubscribe>

Dear ORC community, and especially to those planning to act as stewards!

The European Commission has updated the EC CRA FAQ today bringing clarity to a topic that has been largely discussed.

The new FAQ entry published today 5.5 says:

"5.5 Are open-source software stewards subject to reporting obligations under the CRA?
Article 24(3) of the CRA establishes that reporting obligations laid down in Article 14, paragraphs (1), (3) and (8), apply to open-source software stewards under certain
circumstances.
In accordance with Article 71(2) of the CRA, Article 24(3) shall apply from 11 December 2027."

Hope this helps, have a great weekend.

Juan

Juan Rico

Eclipse Foundation: The Community for Open Collaboration and Innovation

Berliner Allee 47, 64295 Darmstadt

Handelsregister: Darmstadt HRB 92821

Managing Directors: Gaël Blondelle, Mike Milinkovich, Michael Plagge

Follow-Ups:
- Re: [open-regulatory-compliance] Update on reporting obligations for open source software stewards
  - From: Steffen Zimmermann
- Re: [open-regulatory-compliance] Update on reporting obligations for open source software stewards
  - From: Scott Lewis

Prev by Date: [open-regulatory-compliance] Stewards cybersecurity policy, should it be a public document?
Next by Date: Re: [open-regulatory-compliance] Update on reporting obligations for open source software stewards
Previous by thread: [open-regulatory-compliance] Stewards cybersecurity policy, should it be a public document?
Next by thread: Re: [open-regulatory-compliance] Update on reporting obligations for open source software stewards
Index(es):
- Date
- Thread

Breadcrumbs