{
  "as_of": "2026-10-21",
  "verified": "2026-10-20",
  "deadline": {
    "id": "cra-reporting-obligations",
    "law": "Cyber Resilience Act",
    "topic": "Cybersecurity",
    "obligation": "Manufacturers must report actively exploited vulnerabilities and severe incidents in products with digital elements (Article 14).",
    "date": "2026-09-11",
    "status": "applies",
    "days_until": -40,
    "times_moved": 0,
    "previous_date": null,
    "source": {
      "date": "2026-09-11",
      "act": "Regulation (EU) 2024/2847 (Cyber Resilience Act)",
      "article": "Article 71(2)",
      "quote": "Article 14 shall apply from 11 September 2026",
      "url": "http://data.europa.eu/eli/reg/2024/2847/oj",
      "sha256": "fe0cca4a0caec50e7cf5a91432b94a19b211f86be8584fdba56372bdcea571ed"
    },
    "history": [
      {
        "date": "2026-09-11",
        "act": "Regulation (EU) 2024/2847 (Cyber Resilience Act)",
        "article": "Article 71(2)",
        "quote": "Article 14 shall apply from 11 September 2026",
        "url": "http://data.europa.eu/eli/reg/2024/2847/oj",
        "sha256": "fe0cca4a0caec50e7cf5a91432b94a19b211f86be8584fdba56372bdcea571ed"
      }
    ]
  }
}