Users looking to protect their online privacy have largely had to rely on advertising promises from VPN providers or occasional external audits of encryption and no-logging policies. That's why the European Telecommunications Standards Institute (ETSI) is introducing a single, legally binding standard, EN 304 620. The new rules require that all VPN services sold on the European market meet strict, independently verifiable requirements for encryption, authentication and vulnerability management.<\/p>\n\n\n\n
The new draft standard is aimed squarely at VPN clients, servers, and gateways. It specifies how these products must protect and encrypt user internet traffic as it travels over unverified or public networks. Whether a provider uses industry-standard AES-256 encryption, modern WireGuard protocols, or servers that run entirely in system memory, they will be required to clearly demonstrate the operation of their security mechanisms.<\/p>\n\n\n\n
The standard forms an important part of the broader Cyber Resilience Act, which will require all digital product manufacturers to meet basic cyber requirements by the end of 2027. The new rules also provide for mandatory and rapid reporting of security vulnerabilities that are actively exploited, which means much greater liability for providers in the event of a breach. For the average user, this brings a significantly higher level of security, as unverified or even dangerous free VPN apps will have to improve their protection or be removed from the European market.<\/p>\n\n\n\n
At the same time, regulatory oversight does not stop at VPNs. ETSI has launched the approval process for a total of 17 European standards supporting the CRA legislation. These also cover other everyday digital solutions such as password managers, antivirus software, smart home assistants, connected toys and wearables. The result of these efforts will be a significantly more secure and resilient digital world for all European consumers.<\/p>","protected":false},"excerpt":{"rendered":"
Uporabniki, ki \u017eelijo za\u0161\u010dititi svojo zasebnost na spletu, so se morali doslej v veliki meri zana\u0161ati le na ogla\u0161evalske obljube ponudnikov storitev VPN ali ob\u010dasne zunanje revizije glede \u0161ifriranja in politik nebele\u017eenja aktivnosti. Zato Evropski in\u0161titut za telekomunikacijske standarde (ETSI) uvaja enoten in pravno zavezujo\u010d standard z oznako EN 304 620. Nova pravila zahtevajo, da […]<\/p>","protected":false},"author":2,"featured_media":0,"comment_status":"","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[4],"tags":[1113],"class_list":["post-8047","post","type-post","status-publish","format-standard","hentry","category-racunalnistvo-telefonija","tag-vpn"],"acf":{"subtitle":"","heading":"","summary":"EU z novim standardom EN 304 620 postavlja stroga varnostna pravila za storitve VPN. Ponudniki bodo morali dokazati ustrezno \u0161ifriranje in za\u0161\u010dito podatkov, neustrezne aplikacije pa bodo morale izbolj\u0161ati varnost ali zapustiti evropski trg.","thumbnail_small":"https:\/\/racunalniske-novice.com\/wp-content\/uploads\/2025\/12\/vpn-4255476_1280-560x315.jpg","thumbnail_large":"https:\/\/racunalniske-novice.com\/wp-content\/uploads\/2025\/12\/vpn-4255476_1280-1024x682.jpg","thumbnail_caption":"","gallery":"","video_gallery":null,"author":"","links":null,"sources":[{"title":"techradar","url":"https:\/\/www.techradar.com\/vpn\/vpn-services\/eu-introduces-strict-new-security-rules-for-vpns-with-the-help-of-industry-giants"}],"skip_language":[]},"yoast_head":"\n