Third-Party Certification Required from Late 2026 Content: The EU’s Cyber Resilience Act adds cybersecurity as a core legal safety requirement for all connected hardware products sold within the bloc. Smart home devices, industrial robots, medical IoT equipment and automotive AI systems can no longer rely on self-assessment; independent notified bodies must conduct full security certification before market release. Products with unpatched critical vulnerabilities will face forced market recalls and multi-million-euro regulatory fines.