Luca BertonConsumer-facing smart home products are squarely in the CRA's crosshairs. Three ETSI vertical standards specifically address this category: connected toys (EN 304 633), wearables (EN 304 634), and smart home virtual assistants (EN 304 631).
Connected Toys (EN 304 633)
Internet-connected toys pose unique risks because their users are children. The CRA adds to existing toy safety regulation with specific cybersecurity requirements:
- No default or weak credentials
- Parental controls for data sharing
- Encrypted communications (especially voice/video)
- Clear end-of-support communication
Personal Wearables (EN 304 634)
Fitness trackers, smartwatches, and health monitors collect sensitive personal data. CRA requirements emphasize:
- Encrypted storage of health and biometric data
- Secure pairing mechanisms (Bluetooth, Wi-Fi)
- Data minimization — only collect what's needed
- Secure firmware update mechanisms
📘 Book
Kubernetes Recipes
A practical guide for container orchestration and deployment by Grzegorz Stencel & Luca Berton (Apress).
Watch on Skillshare →Virtual Assistants (EN 304 631)
Alexa, Google Home, and similar devices classified as Important Class I. Key concerns:
- Always-on microphone security
- Authentication for sensitive commands (purchases, door locks)
- Transparency about data processing
- Local processing options where feasible
cra
smart home
iot
consumer electronics
wearables