Starting Friday, European organizations will have just 24 hours to notify the EU government any time they discover serious product security incidents.