Heuking - Germany

With the Cyber Resilience Act (CRA), the European Union has introduced new mandatory cybersecurity requirements for products with digital elements. For manufacturers, this marks the end of the previously largely voluntary standards-based regulatory landscape, which is now replaced by a harmonised European legal framework. In light of the reporting obligations for actively exploited vulnerabilities and serious security incidents taking effect from 11 September 2026, as well as the full applicability of the CRA from 11 December 2027, practical preparations for the new obligations are becoming increasingly important...

Federal Labour Court, Judgment of 4 December 2025 – Case No. 2 AZR 55/25 In its judgment of 4 December 2025 (Case No. 2 AZR 55/25), the Federal Labour Court held that an extraordinary termination is ineffective if the employer fails to comply with the two-week deadline under Section 626 (2) of the German Civil Code (BGB) by remaining inactive during the employee’s annual leave and making no attempt to contact the employee for a hearing. According to the Court, neither the Federal Leave Act (Bundesurlaubsgesetz) nor EU law establishes a general prohibition on contacting an employee during annual leave...