I want to cover three international items too.
Canada has recently passed two significant laws that allow consumers to bypass digital software locks for repair and interoperability purposes. These bills amend the Copyright Act, enabling device owners to repair their products and use third-party components without manufacturer restrictions. Experts from iFixit and the Canadian Repair Coalition note that they do not provide access to the necessary tools for bypassing these locks, leaving many repair tasks difficult for the average person.
The European Union has officially adopted the Cyber Resilience Act, aimed at enhancing the cybersecurity of products with digital elements. This regulation will impose significant obligations on manufacturers of connected products sold in the EU, with implementation beginning in 2026. The Act introduces EU-wide cybersecurity requirements for the design, development, and market availability of these products, covering home devices like cameras and smart fridges. Manufacturers must ensure their products are free from known vulnerabilities and comply with essential cybersecurity standards, while facing penalties of up to 15 million euros for non-compliance. The regulation will take effect 20 days after publication in the EU’s Official Journal, with the majority of obligations applying by the end of 2027.
SMBiT Professionals, representing small and medium business IT providers in Australia, has joined the steering committee at Dynamic Standards International to develop a new cybersecurity certification standard known as SMB1001. This initiative aims to enhance cybersecurity for small businesses by establishing comprehensive guidelines on risk management, data protection, incident response, and access control.
The EU continues to set the standard in cybersecurity regulation with the Cyber Resilience Act, reinforcing its position as a regulatory trendsetter. Canada’s move could influence similar initiatives in other markets, especially where right-to-repair laws are gaining traction, like the U.S. and the EU.
I wanted to highlight the involvement of Australian SMB community members in regulatory compliance. Pick your organization, but get involved.