EU law 2014/53/EU imposes new cybersecurity requirements on device manufacturers like Samsung. They must ensure that the devices they sell in Europe block the installation of unauthorized software and only run signed and approved ROMs.