= Cyber Resilience Act & Free Software: Parliament waters down its own position =

[ Version en ligne: https://fsfe.org/news/2023/news-20230719-01.fr.html ]

The European Parliament today voted on its position on the Cyber Resilience Act (CRA). While the position improves on the Commission's exemption to protect Free Software, it fails to introduce a proper protection . We call on the institutions to put the burden of liability only on those who significantly financially benefit from the market, while protecting developers and non-profit work.

The Commission’s proposal to exclude Free Software “outside the course of a commercial activity” would fail to address a large part of software that will not be covered but is deployed. At the same time, smaller and non-profit projects would be harmed as they would have to bear major costs.

Therefore we have already proposed a solution that will lead to more security while safeguarding Free Software:

1. Liability should be shifted to those *deploying* Free Software instead of those *developing* Free Software and

2. Those who significantly financially benefit from this deployment should make sure the software becomes CE-compliant

While the Internal Market and Consumer Protection Committee (IMCO), a committee for opinion in CRA, backed our demand and voted for the protection of Free Software developers in the Cyber Resilience Act, the Committee on Industry, Research and Energy (ITRE) introduced less far reaching protections with today's vote. Regular corporate donations or contributions by corporate employees to a project could turn non-profit work into a “commercial activity”, and thus lead to liability.

/Alexander Sander, FSFE Senior Policy Consultant explains:/ "With today's vote, the EU Parliament has watered down its own position. Placing the burden of liability on small or non-profit entities that rely on regular donations would harm the Free Software and thus society and business alike. Due to the lack of funding and resources to go through the proposed procedures to become CE compliant, some of these projects might have to stop completely. We call on the institutions to find a compromise that safeguards the Free Software ecosystem while shifting liability to those who significantly financially benefit from the deployment” /./ Interinstitutional negotiations will start start soon and should be concluded this year if possible. You can read more here [1].

1: https://fsfe.org/news/2023/news-20230323-01.fr.html

== About the Free Software Foundation Europe ==

Free Software Foundation Europe is a charity that empowers users to control technology. Software is deeply involved in all aspects of our lives; and it is important that this technology empowers rather than restricts us. Free Software gives everybody the rights to use, understand, adapt and share software. These rights help support other fundamental freedoms like freedom of speech, press and privacy.

The FSFE helps individuals and organisations understand how Free Software contributes to freedom, transparency and self-determination. We enhance users' rights by abolishing barriers to Free Software adoption, encourage people to use and develop Free Software, and provide resources to enable everyone to further promote Free Software in Europe.

https://fsfe.org