Article 69(3) of the EU Cyber Resilience Act retroactively applies Article 14 reporting obligations to all in-scope products already placed on the EU market before December 11, 2027