Call for evidence on the Cyber Resilience Act
Position Paper
23 May 2022
Digital

 

As the European Union’s economy and society continue to embrace digital solutions, there is an urgent need to ensure that the EU’s networks and information systems are resilient against evolving cyberattacks. The American Chamber of Commerce to the European Union (AmCham EU) supports a strong cybersecurity environment in Europe, which is the responsibility of government and industry alike. The future Cybersecurity Resilience Act (CRA) will address a wide range of digital products and services. This paper outlines key recommendations regarding aspects of the expected CRA that require clarity and focus, with the aim of making sure the upcoming proposal reinforces the security of the entire supply chain, avoids security risks in products and services and protects customers and citizens against malpractices and abuse. Our suggestions encompass the scope, security requirements, role of the industry, harmonisation, market surveillance and the differences between Business-to-Business (B2B) and Business-to-Consumer (B2C) products.

Related items

Position Paper
13 May 2026

Strengthening Europe’s cybersecurity framework through simplification

The review of the Cybersecurity Act (CSA 2.0) is an opportunity to build a more coherent, outcome-oriented EU cybersecurity framework. While the proposal recognises fragmentation across the Single Market, further simplification is needed to reduce overlaps and support effective compliance.

A harmonised approach to risk assessment and supervision can strengthen resilience while avoiding duplicative obligations. Certification and supply-chain measures should remain risk-based, objective, technical and aligned with international standards. Structured industry engagement and clear designation thresholds under the ICT Supply Chain Framework and a secure-by-design approach to policymaking will be essential to support cybersecurity and global interoperability. Read more on how CSA 2.0 can strengthen resilience across the Single Market.

Digital
Read more
Read more about Strengthening Europe’s cybersecurity framework through simplification
Close-up of a laptop keyboard with blue backlighting, highlighting the shift key and adjacent keys in a soft-focus perspective.
News
13 Apr 2026

Industry calls for ambitious and simplified implementation of the AI Act 

Together with 14 other associations, AmCham EU has signed a joint statement on the European Commission’s Digital Omnibus on AI, calling for a clear, simple and innovation-friendly implementation of the AI Act. Co-legislators should swiftly reach an agreement on an ambitious final text that keeps simplification at its core. Measures to streamline overlaps with existing EU legislation and improve legal certainty are essential, alongside targeted adjustments to ensure the framework remains practical. This includes extending grace periods for generative AI labelling requirements, ensuring greater legal clarity for AI systems entering the EU market, preserving the risk-based approach of the AI Act by exempting non high-risk systems from registration, and supporting fixed compliance deadlines for high-risk systems.

Learn how the EU can support a clear and innovation friendly framework in the joint statement.

Digital
Read more
Read more about Industry calls for ambitious and simplified implementation of the AI Act 
News
24 Mar 2026

Reducing complexity in Europe’s digital rulebook

The EU’s digital regulatory landscape has expanded significantly in recent years. While the creation of these rules pursues important objectives, their interaction has not always been fully aligned, creating legal uncertainty and increased compliance burdens for businesses.  

The European Commission’s proposals for a Digital Omnibus and the Digital Omnibus on AI Regulation Proposal (AI Omnibus) both offer opportunities to improve coherence across the EU’s digital rulebook while supporting Europe’s competitiveness in the digital economy. Both initiatives represent a positive step forward, but further refinements will be needed to ensure they fully deliver on their objectives while maintaining high standards for safety and fundamental rights. 

The AI Omnibus focuses on the AI Act, while the Digital Omnibus addresses broader elements of the digital acquis, including data and cybersecurity legislation. Together, they aim to reduce fragmentation and streamline obligations across multiple frameworks. Explore below how these proposals can better support innovation and competitiveness in Europe.

Digital
Simplification
Read more
Read more about Reducing complexity in Europe’s digital rulebook