BSA welcomes the EU Commission’s overall objective in its proposal on horizontal cybersecurity requirements for products with digital elements and amending Regulation (EU) 2019/1020 (EU Cyber-Resilience Act, hereafter “CRA”).

BSA’s 2023 Global Cyber Agenda builds on our work to improve software security, manage cybersecurity risk for emerging technologies, harmonize laws and policies within and between governments, support investment in modern IT infrastructure and cybersecurity, and develop the cyber workforce of the future.

This document focuses on what processors can (and cannot) do in helping controllers respond to consumer rights requests.

This document explains the history of the controller/processor distinction and demonstrates how widely that distinction has been adopted in global privacy laws.