EU Council moves to exclude software-as-a-service from new cybersecurity law

A new EU Council’s text puts Software-as-a-Service outside of the scope of the Cyber Resilience Act, while the European Commission clarified the legal basis would not allow for it.