Cyber Resilience Act
Obligations under Regulation (EU) 2024/2847
25 pages covering every article that creates a duty for an economic operator and every annex of the Regulation. Each states who it binds, from when, and what evidence proves it. Requirement text is verbatim Official Journal; guidance is Legalithm commentary.
Reporting duties under Article 14 apply from 11 September 2026. The rest of the Regulation applies from 11 December 2027. Corpus as of 2026-08-13, not reviewed by counsel.
Articles
- Requirements for products with digital elements
Article 6 · binds manufacturer · from 11. Dez. 2027
- Obligations of manufacturers
Article 13 · binds manufacturer · from 11. Dez. 2027
- Reporting obligations of manufacturers
Article 14 · binds manufacturer · from 11. Sept. 2026
- Authorised representatives
Article 18 · binds authorised representative, manufacturer · from 11. Dez. 2027
- Obligations of importers
Article 19 · binds importer · from 11. Dez. 2027
- Obligations of distributors
Article 20 · binds distributor · from 11. Dez. 2027
- Cases in which obligations of manufacturers apply to importers and distributors
Article 21 · binds distributor, importer · from 11. Dez. 2027
- Other cases in which obligations of manufacturers apply
Article 22 · binds substantial modifier · from 11. Dez. 2027
- Identification of economic operators
Article 23 · binds economic operators · from 11. Dez. 2027
- Obligations of open-source software stewards
Article 24 · binds open source steward · from 11. Dez. 2027
- Presumption of conformity
Article 27 · binds manufacturer · from 11. Dez. 2027
- EU declaration of conformity
Article 28 · binds manufacturer · from 11. Dez. 2027
- Rules and conditions for affixing the CE marking
Article 30 · binds manufacturer · from 11. Dez. 2027
- Technical documentation
Article 31 · binds manufacturer · from 11. Dez. 2027
- Conformity assessment procedures for products with digital elements
Article 32 · binds manufacturer · from 11. Dez. 2027
Annexes
- Essential cybersecurity requirements: properties of products
Annex I Part I · binds manufacturer · from 11. Dez. 2027
- Essential cybersecurity requirements: vulnerability handling
Annex I Part II · binds manufacturer · from 11. Dez. 2027
- Information and instructions to the user
Annex II · binds manufacturer · from 11. Dez. 2027
- Content of the EU declaration of conformity
Annex V · binds manufacturer · from 11. Dez. 2027
- Simplified EU declaration of conformity
Annex VI · binds manufacturer · from 11. Dez. 2027
- Content of the technical documentation
Annex VII · binds manufacturer · from 11. Dez. 2027
- Conformity assessment based on internal control (module A)
Annex VIII Part I · binds manufacturer · from 11. Dez. 2027
- EU-type examination (module B)
Annex VIII Part II · binds manufacturer · from 11. Dez. 2027
- Conformity to type based on internal production control (module C)
Annex VIII Part III · binds manufacturer · from 11. Dez. 2027
- Conformity based on full quality assurance (module H)
Annex VIII Part IV · binds manufacturer · from 11. Dez. 2027