CLAIM-2026-08-05-06

ENISA states that the Single Reporting Platform established under the Cyber Resilience Act is scheduled to be operational by 11 September 2026, acting as a single entry point for manufacturers and open-source software stewards to submit vulnerability and incident notifications, and supporting voluntary reporting after that date.

Why it matters

The notification does not go to a data protection authority or to a familiar national regulator. It goes through a platform that does not exist yet in production, on the same day the duty starts. Registration and a dry run belong on the calendar before September.

Sources

• enisa2026single