The EU Cyber Resilience Act: What It Means for Raspberry Pi (and You)

The Cyber Resilience Act is about to change how every connected product gets built, sold and supported in the EU; and Raspberry Pi is no exception. In this episode, Tom Westcott, Matthew Lear and James Hughes sit down to unpack what the CRA actually requires, who it applies to, and what it means in practice for makers, developers and manufacturers building on Raspberry Pi.

They cover the basics of the legislation like secure-by-design requirements, vulnerability disclosure obligations, and the compliance deadlines heading into 2027 before getting into the part most people actually want to know: how Raspberry Pi helps you to be CRA compliant, and what that means for anyone building products on top of it.
Whether you're shipping a commercial product, running a small business, or just curious about how EU regulation reaches into the maker world, this conversation breaks down the legislation without the legal jargon.

In this episode:
What the Cyber Resilience Act is and why it exists
Who's actually in scope (spoiler: it's not just big manufacturers)
How Raspberry Pi is helping developers meet CRA requirements
Practical steps you can take now to get ahead of compliance deadlines


Before you go, please subscribe to our channel!

Buy a Raspberry Pi: https://www.raspberrypi.com/products/

You can also find us on TikTok, Instagram, Threads, Facebook, LinkedIn and Twitter/X