Compliance and regulations

ST's new CRA webpage helps you understand your compliance obligations and how ST's products and expertise can support your journey.  If you're designing products with digital elements for the European market, the EU Cyber Resilience Act (CRA) is already on your radar. With reporting obligations starting September 11, 2026, and full compliance enforcement from December 11, 2027, the clock is ticking for manufacturers to get their processes in order. 

Security is now a core part of product development. The EU’s Cyber Resilience Act (CRA) and Radio Equipment Directive (RED) have set mandatory cybersecurity and safety standards for connected digital and radio devices. The CRA is a new EU law requiring connected digital products to meet strict cybersecurity standards throughout their lifecycle, protecting users and reducing cyber risks. The RED is an EU regulation ensuring radio and telecom devices are safe, free from harmful interference, and equipped with essential security features for reliable wireless communication. As deve

 Over the past decade, cybersecurity regulations have become increasingly stringent, especially in specific industries like aviation, medical, and automotive. The new European law Cyber Resilience Act (CRA), published in December 2024 and set to take effect in December 2027, will extend these regulations to all remaining application fields. A critical aspect of these regulations is the tracking of vulnerabilities. In this regard, a major milestone is the accurate tracing of the software bill of mater

STMicroelectronics has unveiled STPay-Topaz-2, its next-generation contactless payment card system-on-chip (SoC), offering more flexibility to support a wider variety of payment brands and ease stock management for customers. The new auto-tuning feature ensures reader-independent connection quality for an enhanced user experience, while advanced cryptography strengthens security and prepares the platform for upcoming, stronger industry standards. ST has already supplied more than three billion STPay ready-to-use solutions to the payment market. STPay-Topaz-2 now introduces a specific feature which allows preloading the greatest quantity of payment applets per orderable part number in the market, which simplifies inventory management for card manufacturers. This innovation include

ST is one of the two first companies to achieve EUCC certification in France and Europe for its ST54 product family, an all-in-one NFC controller, eSIM, and secure element for connected devices. This milestone underscores ST's commitment to providing state-of-the-art security solutions that meet the stringent cybersecurity regulations now required in Europe. With the adoption of the EU Cybersecurity Act (CSA), the European Union (EU) has introduced a new security certification scheme called "EUCC" (EU Common Criteria). The EUCC scheme aims to harmonize cybersecurity standards across all 27 member states, replacing the previous SOG-IS scheme. The EUCC will become an essential certification reference for upcoming European regulations such as the Cyber Resilience Act (CRA) and the cybersecurity update for the Radio Equipment Directive (RED). Starting in 202