The European Commission has published its long-awaited Cyber Resilience Act Implementation Guidance, clarifying scope, open-source software treatment, "substantial modification," and support-period obligations for connected products. Issued July 27, 2026, the non-binding guidance lands weeks before the CRA's first reporting deadline on September 11, 2026, and well ahead of full enforcement on December 11, 2027. Manufacturers and developers selling digital products in the EU s

China's MIIT has published GB 44721-2026, the country's first mandatory national standard governing the safety of automated driving systems in intelligent connected vehicles. Covering Class M and Class N vehicles with Level 3 and Level 4 automation, the China automated driving safety standard sets lifecycle safety obligations, dynamic driving task requirements, human-machine interaction rules, and a new three-part testing regime. It takes effect July 1, 2027. Here's what manu

Kenya's Communications Authority (CA) is enforcing a new Communications Equipment Distributor (CED) Licence requirement for any business importing or wholesale-distributing communications equipment, including routers, modems, and other CPE. Following the Revised Telecommunications Market Structure gazetted in March 2026, importers and distributors — including existing TEC and Vendor licence holders — must secure the CED Licence before equipment can be type-approved and cleare

Mexico's Comisión Reguladora de Telecomunicaciones (CRT) has launched a public consultation on the Mexico CRT regulatory sandbox consultation for its proposed "General Guidelines for the Authorization of Controlled Testing and Experimentation Environments in Telecommunications and Broadcasting." The framework would let industry, academia, and entrepreneurs trial new technologies, equipment, and business models under direct regulatory supervision. Comments are open through Sep