Question 1

Is an identical spare part an important product under the Cyber Resilience Act, and what does it still have to do?

Accepted Answer

No. Spare parts that replace identical components and are made to the same specifications are outside the Act (Art. 2(6)); whether a part is identical is a question. The Cyber Resilience Act's classes do not apply; the UK PSTI rules and California's law are read by where it is sold.

Question 2

What does an identical spare part sold to UK consumers or in California have to show?

Accepted Answer

Under the UK PSTI rules: no universal default password, a published point of contact for security issues, a published defined support period, and a statement of compliance with the product. Under California Civil Code 1798.91.04: a reasonable security feature, and for authentication outside a local area network a password unique to each device or one the user sets before first access.

Identical spare part

A line that places here

Other functions in out of scope (article 2)