{"id":5296,"date":"2022-10-12T23:05:46","date_gmt":"2022-10-12T22:05:46","guid":{"rendered":"https:\/\/mouillere.com\/universconvergents\/?p=5296"},"modified":"2022-10-13T19:46:10","modified_gmt":"2022-10-13T18:46:10","slug":"european-cyber-resilience-act-apres-le-privacy-by-design-du-rgpd-le-security-by-design","status":"publish","type":"post","link":"https:\/\/mouillere.com\/universconvergents\/2022\/10\/12\/european-cyber-resilience-act-apres-le-privacy-by-design-du-rgpd-le-security-by-design\/","title":{"rendered":"European Cyber Resilience Act : apr\u00e8s le Privacy by design du RGPD, le Security by design"},"content":{"rendered":"<p>La Commission europ\u00e9enne a pr\u00e9sent\u00e9 une proposition de r\u00e8glementation europ\u00e9enne sur la cybers\u00e9curit\u00e9 des appareils connect\u00e9s qui doit encore \u00eatre approuv\u00e9 par le Parlement et le Conseil.<\/p>\n<p><!--more--><\/p>\n<p>Le European Cyber Resilience Act vise \u00e0 prot\u00e9ger les consommateurs et les entreprises des objets connect\u00e9s non s\u00e9curis\u00e9s gr\u00e2ce \u00e0 de nouvelles normes, les fabricants \u00e9tant tenus de les respecter lors de la conception de leurs produits (hardware et software).<\/p>\n<p>Le non-respect des normes de Security by design sera sanctionn\u00e9 d&#8217;une amende allant jusqu&#8217;\u00e0 15 millions d&#8217;euros ou 2,5% du chiffre d&#8217;affaires annuel mondial total. La fourniture d&#8217;informations incorrectes, incompl\u00e8tes ou trompeuses est passible d&#8217;une amende pouvant aller jusqu&#8217;\u00e0 5 millions d&#8217;euros et jusqu&#8217;\u00e0 1 % du chiffre d&#8217;affaires annuel mondial total.<\/p>\n<p>Mais comme pour le RGPD, sans responsabilit\u00e9 p\u00e9nale des dirigeants, le caract\u00e8re dissuasif des sanctions risque d&#8217;\u00eatre tr\u00e8s limit\u00e9, les entreprises high tech ayant depuis 40 ans int\u00e9gr\u00e9es le risque juridique et financier dans leurs mod\u00e8les \u00e9conomiques.<\/p>\n<p><a href=\"https:\/\/www.european-cyber-resilience-act.com\" target=\"_blank\" rel=\"noopener\">https:\/\/www.european-cyber-resilience-act.com<\/a><\/p>\n<p><a href=\"https:\/\/www.usine-digitale.fr\/article\/bruxelles-instaure-une-obligation-de-cybersecurite-by-design-pour-les-fabricants-d-objets-connectes.N2044217\" target=\"_blank\" rel=\"noopener\">https:\/\/www.usine-digitale.fr\/article\/bruxelles-instaure-une-obligation-de-cybersecurite-by-design-pour-les-fabricants-d-objets-connectes.N2044217<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>La Commission europ\u00e9enne a pr\u00e9sent\u00e9 une proposition de r\u00e8glementation europ\u00e9enne sur la cybers\u00e9curit\u00e9 des appareils connect\u00e9s qui doit encore \u00eatre approuv\u00e9 par le Parlement et le Conseil.<\/p>\n","protected":false},"author":1,"featured_media":5297,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[20,74],"tags":[],"class_list":["post-5296","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurite","category-it"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"https:\/\/i0.wp.com\/mouillere.com\/universconvergents\/wp-content\/uploads\/2022\/10\/European-Cyber-Resilience-Act-scaled.jpg?fit=2560%2C1317&ssl=1","jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/p6jw1p-1nq","jetpack-related-posts":[{"id":4644,"url":"https:\/\/mouillere.com\/universconvergents\/2020\/06\/03\/rgpd-ne-pas-negliger-le-risque-de-class-action\/","url_meta":{"origin":5296,"position":0},"title":"RGPD: ne pas n\u00e9gliger le risque de class action","author":"Fred","date":"3 juin 2020","format":false,"excerpt":"Le cabinet d'avocats PGMBM a lanc\u00e9 une class action contre EasyJet (en sus de celle intent\u00e9e contre British Airways) en proposant aux 9 millions de victimes de violation des donn\u00e9es personnelles une indemnisation de 2000\u20ac par client. Cela rappelle qu'outre les amendes administratives pouvant \u00eatre prononc\u00e9es par les autorit\u00e9s de\u2026","rel":"","context":"Dans &quot;Cybers\u00e9curit\u00e9&quot;","block_context":{"text":"Cybers\u00e9curit\u00e9","link":"https:\/\/mouillere.com\/universconvergents\/category\/it\/cybersecurite\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/mouillere.com\/universconvergents\/wp-content\/uploads\/2018\/03\/rgpd-compressor.jpg?fit=1200%2C702&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/mouillere.com\/universconvergents\/wp-content\/uploads\/2018\/03\/rgpd-compressor.jpg?fit=1200%2C702&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/mouillere.com\/universconvergents\/wp-content\/uploads\/2018\/03\/rgpd-compressor.jpg?fit=1200%2C702&ssl=1&resize=525%2C300 1.5x, https:\/\/i0.wp.com\/mouillere.com\/universconvergents\/wp-content\/uploads\/2018\/03\/rgpd-compressor.jpg?fit=1200%2C702&ssl=1&resize=700%2C400 2x, https:\/\/i0.wp.com\/mouillere.com\/universconvergents\/wp-content\/uploads\/2018\/03\/rgpd-compressor.jpg?fit=1200%2C702&ssl=1&resize=1050%2C600 3x"},"classes":[]},{"id":5821,"url":"https:\/\/mouillere.com\/universconvergents\/2024\/01\/10\/ai-pact-entre-menaces-et-opportunites\/","url_meta":{"origin":5296,"position":1},"title":"AI Pact : entre menaces et opportunit\u00e9s","author":"Fred","date":"10 janvier 2024","format":false,"excerpt":"AI Pact vise \u00e0 promouvoir le d\u00e9veloppement et le d\u00e9ploiement de l'IA en Europe tout en respectant les valeurs et les droits fondamentaux des citoyens europ\u00e9ens via une coop\u00e9ration renforc\u00e9e entre les \u00c9tats membres, les institutions europ\u00e9ennes, le secteur priv\u00e9, la soci\u00e9t\u00e9 civile et les chercheurs, et un investissement de\u2026","rel":"","context":"Dans &quot;IA&quot;","block_context":{"text":"IA","link":"https:\/\/mouillere.com\/universconvergents\/category\/it\/ia\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/mouillere.com\/universconvergents\/wp-content\/uploads\/2024\/01\/AI-Pact.jpeg?fit=1024%2C1024&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/mouillere.com\/universconvergents\/wp-content\/uploads\/2024\/01\/AI-Pact.jpeg?fit=1024%2C1024&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/mouillere.com\/universconvergents\/wp-content\/uploads\/2024\/01\/AI-Pact.jpeg?fit=1024%2C1024&ssl=1&resize=525%2C300 1.5x, https:\/\/i0.wp.com\/mouillere.com\/universconvergents\/wp-content\/uploads\/2024\/01\/AI-Pact.jpeg?fit=1024%2C1024&ssl=1&resize=700%2C400 2x"},"classes":[]},{"id":2475,"url":"https:\/\/mouillere.com\/universconvergents\/2017\/06\/05\/les-entreprises-seront-elles-en-conformite-avec-le-rgdp-en-mai-2018\/","url_meta":{"origin":5296,"position":2},"title":"Les entreprises seront-elles en conformit\u00e9 avec le RGDP en mai 2018 ?","author":"Fred","date":"5 juin 2017","format":false,"excerpt":"Le 25 mai 2018, les entreprises europ\u00e9ennes devront appliquer le RGDP et s\u2019assurer de la s\u00e9curisation des donn\u00e9es. Elles seront enti\u00e8rement responsables de la cha\u00eene de traitement des donn\u00e9es et devront s\u2019assurer des garanties apport\u00e9es par les sous-traitants et fournisseurs. Les entreprises de plus de 250 salari\u00e9s devront tenir un\u2026","rel":"","context":"Dans &quot;Donn\u00e9es personnelles&quot;","block_context":{"text":"Donn\u00e9es personnelles","link":"https:\/\/mouillere.com\/universconvergents\/category\/it\/donnees-personnelles\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/mouillere.com\/universconvergents\/wp-content\/uploads\/2017\/06\/34042190.jpg?fit=354%2C397&ssl=1&resize=350%2C200","width":350,"height":200},"classes":[]},{"id":1658,"url":"https:\/\/mouillere.com\/universconvergents\/2016\/01\/22\/loi-numerique-la-cnil-pourra-infliger-des-amendes-de-20-millions-deuros\/","url_meta":{"origin":5296,"position":3},"title":"Loi Num\u00e9rique : la CNIL pourra infliger des amendes de 20 millions d\u2019euros","author":"Fred","date":"22 janvier 2016","format":false,"excerpt":"Conform\u00e9ment \u00e0 ce que souhaitait l\u2019institution, les d\u00e9put\u00e9s ont augment\u00e9 de mani\u00e8re consid\u00e9rable le montant maximum des amendes pouvant \u00eatre prononc\u00e9es par la Commission nationale de l\u2019informatique et des libert\u00e9s (CNIL) : jusqu\u2019\u00e0 20 millions d\u2019euros ou, pour les entreprises, 4 % de leur chiffre d\u2019affaires annuel mondial http:\/\/www.nextinpact.com\/news\/98192-loi-numerique-cnil-pourra-infliger-amendes-20-millions-d-euros.htm http:\/\/www.assemblee-nationale.fr\/14\/amendements\/3399\/AN\/867.pdf\u2026","rel":"","context":"Dans &quot;Donn\u00e9es personnelles&quot;","block_context":{"text":"Donn\u00e9es personnelles","link":"https:\/\/mouillere.com\/universconvergents\/category\/it\/donnees-personnelles\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/mouillere.com\/universconvergents\/wp-content\/uploads\/2015\/06\/6640564215_b3dc3f033d.jpg?fit=450%2C287&ssl=1&resize=350%2C200","width":350,"height":200},"classes":[]},{"id":7037,"url":"https:\/\/mouillere.com\/universconvergents\/2026\/03\/31\/gouvernance-de-la-securite-numerique\/","url_meta":{"origin":5296,"position":4},"title":"Gouvernance de la s\u00e9curit\u00e9 num\u00e9rique","author":"Fred","date":"31 mars 2026","format":false,"excerpt":"La s\u00e9curit\u00e9 num\u00e9rique ne rel\u00e8ve plus de la simple expertise technique ou de la conformit\u00e9 formelle mais est devenue un imp\u00e9ratif strat\u00e9gique conditionnant la p\u00e9rennit\u00e9, la performance et la souverainet\u00e9 des organisations. Face \u00e0 une menace hybride, industrialis\u00e9e et exacerb\u00e9e par les tensions g\u00e9opolitiques mondiales, le Cigref et l'ANSSI ont\u2026","rel":"","context":"Dans &quot;Cybers\u00e9curit\u00e9&quot;","block_context":{"text":"Cybers\u00e9curit\u00e9","link":"https:\/\/mouillere.com\/universconvergents\/category\/it\/cybersecurite\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/mouillere.com\/universconvergents\/wp-content\/uploads\/2026\/04\/PSN.jpg?fit=1024%2C768&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/mouillere.com\/universconvergents\/wp-content\/uploads\/2026\/04\/PSN.jpg?fit=1024%2C768&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/mouillere.com\/universconvergents\/wp-content\/uploads\/2026\/04\/PSN.jpg?fit=1024%2C768&ssl=1&resize=525%2C300 1.5x, https:\/\/i0.wp.com\/mouillere.com\/universconvergents\/wp-content\/uploads\/2026\/04\/PSN.jpg?fit=1024%2C768&ssl=1&resize=700%2C400 2x"},"classes":[]},{"id":5307,"url":"https:\/\/mouillere.com\/universconvergents\/2022\/10\/16\/le-digital-market-act-dma\/","url_meta":{"origin":5296,"position":5},"title":"Le Digital Market Act (DMA)","author":"Fred","date":"16 octobre 2022","format":false,"excerpt":"Encadrant les relations entre les GAFAM (Google, Apple, Facebook, Amazon, Microsoft) et autres BATX (Baidu, Alibaba, Tencent, Xiaomi) avec les entreprises utilisatrices pour assurer une meilleure concurrence, le DMA a \u00e9t\u00e9 publi\u00e9 le 12\/10\/2022 au JO de l'UE. Contrairement au Digital Services Act (DSA) s'appliquant \u00e0 toutes les entreprises proposant\u2026","rel":"","context":"Dans &quot;IT&quot;","block_context":{"text":"IT","link":"https:\/\/mouillere.com\/universconvergents\/category\/it\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/mouillere.com\/universconvergents\/wp-content\/uploads\/2022\/10\/CloudServices.jpg?fit=1200%2C819&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/mouillere.com\/universconvergents\/wp-content\/uploads\/2022\/10\/CloudServices.jpg?fit=1200%2C819&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/mouillere.com\/universconvergents\/wp-content\/uploads\/2022\/10\/CloudServices.jpg?fit=1200%2C819&ssl=1&resize=525%2C300 1.5x, https:\/\/i0.wp.com\/mouillere.com\/universconvergents\/wp-content\/uploads\/2022\/10\/CloudServices.jpg?fit=1200%2C819&ssl=1&resize=700%2C400 2x, https:\/\/i0.wp.com\/mouillere.com\/universconvergents\/wp-content\/uploads\/2022\/10\/CloudServices.jpg?fit=1200%2C819&ssl=1&resize=1050%2C600 3x"},"classes":[]}],"_links":{"self":[{"href":"https:\/\/mouillere.com\/universconvergents\/wp-json\/wp\/v2\/posts\/5296","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/mouillere.com\/universconvergents\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mouillere.com\/universconvergents\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mouillere.com\/universconvergents\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/mouillere.com\/universconvergents\/wp-json\/wp\/v2\/comments?post=5296"}],"version-history":[{"count":1,"href":"https:\/\/mouillere.com\/universconvergents\/wp-json\/wp\/v2\/posts\/5296\/revisions"}],"predecessor-version":[{"id":5298,"href":"https:\/\/mouillere.com\/universconvergents\/wp-json\/wp\/v2\/posts\/5296\/revisions\/5298"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/mouillere.com\/universconvergents\/wp-json\/wp\/v2\/media\/5297"}],"wp:attachment":[{"href":"https:\/\/mouillere.com\/universconvergents\/wp-json\/wp\/v2\/media?parent=5296"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mouillere.com\/universconvergents\/wp-json\/wp\/v2\/categories?post=5296"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mouillere.com\/universconvergents\/wp-json\/wp\/v2\/tags?post=5296"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}