<html><body><div dir="auto"><div dir="auto">Follow up to November discussion and <a href="https://www.osgeo.org/foundation-news/eu-cyber-resilience-act/">blog post</a> asking OSGeo community to be informed.</div><div dir="auto"><br></div><div dir="auto"><ol start="1" style="margin:0px"><li>At the end November Europe lawmakers agreed on something: <a href="https://www.consilium.europa.eu/en/press/press-releases/2023/11/30/cyber-resilience-act-council-and-parliament-strike-a-deal-on-security-requirements-for-digital-products/">https://www.consilium.europa.eu/en/press/press-releases/2023/11/30/cyber-resilience-act-council-and-parliament-strike-a-deal-on-security-requirements-for-digital-products/</a> <br><br>Free and open source was so far down the priority list that the press release does not even mention it.</li></ol></div><div dir="auto"><br></div><div dir="auto"><ol start="2" style="margin:0px"><li>Next there were assurances that free and open-source community concerns were addressed: <a href="https://www.europarl.europa.eu/news/en/press-room/20231106IPR09007/cyber-resilience-act-agreement-with-council-to-boost-digital-products-security">https://www.europarl.europa.eu/news/en/press-room/20231106IPR09007/cyber-resilience-act-agreement-with-council-to-boost-digital-products-security</a> <br><br>The quote did indicate how our concerns were addressed:<br><br>> We have ensured support for micro and small enterprises and better involvement of stakeholders, and addressed the concerns of the open-source community, while keeping an ambitious European dimension.</li></ol></div><div dir="auto"><br></div><div dir="auto"><ol start="3" style="margin:0px"><li>This week I can find a articles providing clarifications that have been added: <a href="https://openforumeurope.org/eu-cyber-resilience-act-takes-a-leap-forward/">https://openforumeurope.org/eu-cyber-resilience-act-takes-a-leap-forward/</a> <br><br>Two clarifications:<br><br>> the provision of free and open-source software products with digital elements that are not monetised by their manufacturers is not considered a commercial activity<br><br>> The mere circumstances under which the product has been developed, or how the development has been financed should therefore not be taken into account when determining the commercial or non-commercial nature of [making free and open-source software available on the market].</li></ol></div><div dir="auto"><br></div><div dir="ltr">—</div><div dir="auto">Jody</div></div><div style="background-color:rgba(0,0,0,0)!important;border-color:rgb(255,255,255)!important;color:rgb(255,255,255)!important" dir="auto">
</div></body></html>