The Cyber Resilience Act (CRA) is no longer a future concern – it's applicable EU law. The first hard obligations kick in on September 11, 2026, and the regulation applies in full from December 11, 2027. For digital health providers, this raises a question many still underestimate: where exactly does the CRA apply to me – and what about my software supply chain?

This article explains what the CRA requires, which deadlines apply, how it relates to medical device regulation (MDR), and what this means in practice for DiGAs, health apps, and their suppliers.

While the GesundheitsID is just finding its way into everyday DiGA use, the next major identity wave is already emerging at the European level: the EUDI Wallet. By the end of 2026, every EU member state must provide its citizens with such a digital wallet – and healthcare is one of the sectors required to accept it first. For DiGA manufacturers and Digital Health providers or developers, it pays to understand this topic now, while you can still stay ahead of the market.

This article provides an outlook: what the EUDI Wallet is, what the timeline looks like, why healthcare is particularly affected, and how the wallet relates to the GesundheitsID.