Important new law that may impact many on this forum

Hi all, my newsfeed recently popped this up and I thought I should share it. Even though it is not directly Node-RED related, it may impact Node-RED, FlowFuse, the JavaScript Foundation and anyone using Node-RED or other open source in commercial products.

Not the best article explaining the law but useful because it relates to open source specifically.

The new EU act has passed into law and will become active next September. It impacts all developers and vendors producing "digitally enabled" products whether commercially or via any form of funding. It places a number of key requirements on such producers

From what I can tell, it appears to be a generally good thing and should generally improve quality.

Thankfully, UIBUILDER for Node-RED already meets most of the requirements of the law and, while I probably don't actually need to do it, I will be looking to further improve UIBUILDER with things like a Software Bill of Materials to help any producer wanting to use UIBUILDER in commercial/funded projects.

3 Likes

The question, now comes...

When will a rulling be passed, that states

  • If you do XYZ, or have XYZ you are deemed a commercial producer?

open source/unfunded or otherwise

My ZWave Node is used by A smart building supplier (no I wont give out the name :smiley: ), does that make me commercial - or will it soon (I don't benefit - other than the ego boost)?

But Thanks for the info Julian - Much appreciated

As I (marginally) understand it, you would be commercial (or at least funded) if you get paid for their use of your node.

But of course, you are correct in that where is the line drawn? I occasionally get a bit of funding for UIBUILDER but it is tiny - so in theory, it could be said to be partially funded - personally I think that the amount is so tiny I can't believe that anyone would treat it that way. But what would happen if my YouTube UIBUILDER videos reached 100k subscribers and I could get advertising revenue - would that count?

But if you are clearly not funded for the nodes, you are good. The main aim of the law appears to target embedded systems driven by software - think healthcare and critical national infrastructure. As such, I think that it will have an overall positive impact on the industry. And, as a side-benefit, it should help open source developers like us also improve the security of our products. by giving us standards to adopt.

Anyway, the requirements of the law seem pretty sensible and I don't think that they are far from good practice anyway.

1 Like

Is that why you haven't been persistent for a small while?

How was vegas?

:wink:

Haha! It wouldn't even cover the cost of taking the family to see a film about Vegas!

Still, every little helps fund my work on UIBUILDER, the web components and other open source. :smiley:

2 Likes