The Cyber Resilience Act (CRA) is an EU regulation that imposes cybersecurity requirements on products with digital elements. The CRA outlines specific obligations for importers of such products. Importers are positioned as crucial gatekeepers for products entering the EU market from non-EU manufacturers. They must therefore ensure any product they place on the market complies with the CRA's essential cybersecurity requirements. If an importer believes a product is non-compliant or poses a significant cybersecurity risk, they are prohibited from placing it on the market and must inform the manufacturer and market surveillance authorities. Importers are also required to indicate their name and contact details on the product or its packaging, retain a copy of the EU declaration of conformity for at least ten years, and cooperate with authorities on any measures to eliminate cybersecurity risks.