The Cyber Resilience Act primarily applies to operators of essential services (OES) and digital service providers (DSPs) operating within the European Union. OES and DSPs are required to adhere to specific cybersecurity obligations outlined in the act. The scope and requirements may vary depending on the sector and size of the organization.