Starting Friday, businesses operating in the EU will have just 24 hours to notify the government any time they discover serious product security incidents.