From September 12, 2026, the design obligation of Article 3.1 of the Data Act (Regulation (EU) 2023/2854) applies to connected products and related services placed on the market.
The reporting obligations of the Cyber Resilience Act (Regulation (EU) 2024/2847) apply from September 11, 2026, and ENISA's single reporting platform has been operational since that day.
Boston Scientific told the SEC, in an 8-K dated September 7, that the cyberattack detected on August 25 will likely have a material impact on its results.