Aside from the physical repair requirements, part of the same legislation also covers operating system updates for *smartphones* (see Annex II (EU) 2023/1670).

From 20 June 2025, de jure all smartphones sold in the EU must come with at least *five years* of updates.

Also the security updates must be made available to users within four months of them being fixed by the upstream project:

>security updates or corrective updates mentioned under point (a) need to be available to the user at the latest 4 months after the public release of the source code of an update of the underlying operating system or, if the source code is not publicly released, after an update of the same operating system is released by the operating system provider or on any other product of the same brand https://eur-lex.europa.eu/eli/reg/2023/1670/oj