<!DOCTYPE html>
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<p>Hi Jody,</p>
<p>thanks for the update.</p>
<p>The clarification of point 3 is still fuzzy to me. What do they
actually mean by "monetised by manufacturers". Is monetizing only
when the software is open source but people have to pay to use it
on SaaS or similar models ? Otherwise if it is about money being
involved in the making of the open source software, then that
contradicts the second point that how the development was financed
shouldn't be taken into account to determine commercial
activity... Is consulting about open source software "monetizing"
it ... ?</p>
<p>Even<br>
</p>
<div class="moz-cite-prefix">Le 06/12/2023 à 16:09, Jody Garnett via
Discuss a écrit :<br>
</div>
<blockquote type="cite"
cite="mid:CAOhbgA=ftCQaGR6rz+U7uebPdBTXqKdE1J=uajxdeQ_ZGvb35w@mail.gmail.com">
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
<div dir="auto">
<div dir="auto">Follow up to November discussion and <a
href="https://www.osgeo.org/foundation-news/eu-cyber-resilience-act/"
moz-do-not-send="true">blog post</a> asking OSGeo community
to be informed.</div>
<div dir="auto"><br>
</div>
<div dir="auto">
<ol style="margin:0px" start="1">
<li>At the end November Europe lawmakers agreed on
something: <a
href="https://www.consilium.europa.eu/en/press/press-releases/2023/11/30/cyber-resilience-act-council-and-parliament-strike-a-deal-on-security-requirements-for-digital-products/"
moz-do-not-send="true" class="moz-txt-link-freetext">https://www.consilium.europa.eu/en/press/press-releases/2023/11/30/cyber-resilience-act-council-and-parliament-strike-a-deal-on-security-requirements-for-digital-products/</a> <br>
<br>
Free and open source was so far down the priority list
that the press release does not even mention it.</li>
</ol>
</div>
<div dir="auto"><br>
</div>
<div dir="auto">
<ol style="margin:0px" start="2">
<li>Next there were assurances that free and open-source
community concerns were addressed: <a
href="https://www.europarl.europa.eu/news/en/press-room/20231106IPR09007/cyber-resilience-act-agreement-with-council-to-boost-digital-products-security"
moz-do-not-send="true" class="moz-txt-link-freetext">https://www.europarl.europa.eu/news/en/press-room/20231106IPR09007/cyber-resilience-act-agreement-with-council-to-boost-digital-products-security</a> <br>
<br>
The quote did indicate how our concerns were addressed:<br>
<br>
> We have ensured support for micro and small
enterprises and better involvement of stakeholders, and
addressed the concerns of the open-source community, while
keeping an ambitious European dimension.</li>
</ol>
</div>
<div dir="auto"><br>
</div>
<div dir="auto">
<ol style="margin:0px" start="3">
<li>This week I can find a articles providing clarifications
that have been added: <a
href="https://openforumeurope.org/eu-cyber-resilience-act-takes-a-leap-forward/"
moz-do-not-send="true" class="moz-txt-link-freetext">https://openforumeurope.org/eu-cyber-resilience-act-takes-a-leap-forward/</a> <br>
<br>
Two clarifications:<br>
<br>
> the provision of free and open-source software
products with digital elements that are not monetised by
their manufacturers is not considered a commercial
activity<br>
<br>
> The mere circumstances under which the product has
been developed, or how the development has been financed
should therefore not be taken into account when
determining the commercial or non-commercial nature of
[making free and open-source software available on the
market].</li>
</ol>
</div>
<div dir="auto"><br>
</div>
<div dir="ltr">—</div>
<div dir="auto">Jody</div>
</div>
<div
style="background-color:rgba(0,0,0,0)!important;border-color:rgb(255,255,255)!important;color:rgb(255,255,255)!important"
dir="auto">
</div>
<br>
<fieldset class="moz-mime-attachment-header"></fieldset>
<pre class="moz-quote-pre" wrap="">_______________________________________________
Discuss mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Discuss@lists.osgeo.org">Discuss@lists.osgeo.org</a>
<a class="moz-txt-link-freetext" href="https://lists.osgeo.org/mailman/listinfo/discuss">https://lists.osgeo.org/mailman/listinfo/discuss</a>
</pre>
</blockquote>
<pre class="moz-signature" cols="72">--
<a class="moz-txt-link-freetext" href="http://www.spatialys.com">http://www.spatialys.com</a>
My software is free, but my time generally not.</pre>
</body>
</html>