lexiara

Cyber Resilience Act — REGULATION (EU) 2024/2847 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 23 October 2024 on horizontal cybersecurity requirements for products with digital elements and amending Regulations (EU) No 168/2013 and (EU) No 2019/1020 and Directive (EU) 2020/1828 (Cyber Resilience Act) (Text with EEA relevance)

regulation · European Union · 32024R2847

359 provisions · 19 provisions hand work to national law

Defined terms · All instruments · EC conformity marking · computer crime · computer equipment · digital technology · information security · information warfare · market approval · market supervision

1 Subject matter
2 Scope
1
2
3
4
5
6
7
8
3 Definitions
4 Free movement
1
2
3
4
5 Procurement or use of products with digital elements
1
2
6 Requirements for products with digital elements
7 Important products with digital elements
1
2
3
4
8 Critical products with digital elements
1
2
9 Stakeholder consultation
1
2
10 Enhancing skills in a cyber resilient digital environment
11 General product safety
12 High-risk AI systems
1
2
3
4
13 Obligations of manufacturers
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
14 Reporting obligations of manufacturers
1
2
3
4
5
6
7
8
9
10
15 Voluntary reporting
1
2
3
4
5
16 Establishment of a single reporting platform
1
2
3
4
5
6
17 Other provisions related to reporting
1
2
3
4
5
6
18 Authorised representatives
1
2
3
19 Obligations of importers
1
2
3
4
5
6
7
8
20 Obligations of distributors
1
2
3
4
5
6
21 Cases in which obligations of manufacturers apply to importers and distributors
22 Other cases in which obligations of manufacturers apply
1
2
23 Identification of economic operators
1
2
24 Obligations of open-source software stewards
1
2
3
25 Security attestation of free and open-source software
26 Guidance
1
2
3
27 Presumption of conformity
1
2
3
4
5
6
7
8
9
28 EU declaration of conformity
1
2
3
4
5
29 General principles of the CE marking
30 Rules and conditions for affixing the CE marking
1
2
3
4
5
6
31 Technical documentation
1
2
3
4
5
32 Conformity assessment procedures for products with digital elements
1
2
3
4
5
6
33 Support measures for microenterprises and small and medium-sized enterprises, including start-ups
1
2
3
4
5
34 Mutual recognition agreements
35 Notification
1
2
36 Notifying authorities
1
2
3
4
37 Requirements relating to notifying authorities
1
2
3
4
5
6
38 Information obligation on notifying authorities
1
2
39 Requirements relating to notified bodies
1
2
3
4
5
6
7
8
9
10
11
12
40 Presumption of conformity of notified bodies
41 Subsidiaries of and subcontracting by notified bodies
1
2
3
4
42 Application for notification
1
2
3
43 Notification procedure
1
2
3
4
5
6
44 Identification numbers and lists of notified bodies
1
2
45 Changes to notifications
1
2
46 Challenge of the competence of notified bodies
1
2
3
4
47 Operational obligations of notified bodies
1
2
3
4
5
6
48 Appeal against decisions of notified bodies
49 Information obligation on notified bodies
1
2
50 Exchange of experience
51 Coordination of notified bodies
1
2
52 Market surveillance and control of products with digital elements in the Union market
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
53 Access to data and documentation
54 Procedure at national level concerning products with digital elements presenting a significant cybersecurity risk
1
2
3
4
5
6
7
8
9
55 Union safeguard procedure
1
2
3
4
5
56 Procedure at Union level concerning products with digital elements presenting a significant cybersecurity risk
1
2
3
4
5
6
7
57 Compliant products with digital elements which present a significant cybersecurity risk
1
2
3
4
5
6
7
8
9
10
11
58 Formal non-compliance
1
2
59 Joint activities of market surveillance authorities
1
2
3
4
5
60 Sweeps
1
2
3
4
5
61 Exercise of the delegation
1
2
3
4
5
6
62 Committee procedure
1
2
3
63 Confidentiality
1
2
3
4
64 Penalties
1
2
3
4
5
6
7
8
9
10
65 Representative actions
66 Amendment to Regulation (EU) 2019/1020
67 Amendment to Directive (EU) 2020/1828
68 Amendment to Regulation (EU) No 168/2013
69 Transitional provisions
1
2
3
70 Evaluation and review
1
2
71 Entry into force and application
1
2