The European Commission launched a public consultation on December 10, 2025, regarding the planned repeal of Delegated Regulation (EU) 2022/30 on cybersecurity once the Cyber Resilience Act (CRA) enters into force on December 11, 2027.
The initiative aims to avoid overlap and legal uncertainty between cybersecurity requirements under the Radio Equipment Directive and those introduced by the CRA. The consultation is open for public comments until January 7, 2026.