• TWEAK
• Smart home

New EU requirements will strengthen the security of smart locks

Translate from : Nye EU-krav skal styrke trygheden ved smartlåse

To address this uncertainty and create a common framework for the market, the EU’s new regulation, the Cyber Resilience Act (CRA) , has now started to roll out. On 11 September, the very first reporting requirements came into force, marking the start of a series of new rules designed to increase cybersecurity in everything from smart home devices and door locks to computers and mobile phones. The remaining requirements in the regulation will apply collectively from 11 December 2027.

Manufacturers are given responsibility throughout the product's life cycle

The main idea behind the Cyber Resilience Act is that manufacturers of digital products will have to take direct and continuous responsibility for cybersecurity throughout the product's life cycle. This means, among other things, that companies must be able to quickly address security issues and respond immediately if serious security incidents or vulnerabilities that are actively exploited are discovered. As part of the new reporting requirements, for example, manufacturers must submit an early warning within just 24 hours of becoming aware of a security incident.

Jürgen Pansy, co-founder and Chief Innovation Officer at Nuki, sees the new requirements as a natural continuation of the approach the industry should take. He says of the new rules:

“For us, security is not something you add when a new regulation comes into effect. It is part of our DNA and has been from the beginning. Therefore, CRA is first and foremost a natural extension of the way we already develop our products.”

The new directives should not only function as a set of rules for manufacturers, but should also help to make safety visible to consumers, so that the necessary trust is created to allow smart technology to move into private homes.

REVIEW: Nuki Smart Lock Ultra Nordics

Gap between technical reality and consumer perception

There is a clear gap between the actual technical security of modern smart locks and consumers' general perception of the risk. The models on the market today are built with several layers of security, with ongoing software updates protecting against new digital threats.

Since launching their first Smart Lock, Nuki has been working on the Security-by-Design principle. This means that protection, encryption and ongoing threat assessments are built into the product development process from the very beginning, rather than being tacked on at the end. Martin Pansy, co-founder and CEO of Nuki, emphasizes the importance of the entire industry being uplifted by the new standards:

“Security is crucial when allowing technology into your home. That’s why we welcome the new EU rules. They create a common bottom line and can help give consumers greater confidence in using smart technology.”