Who must comply with Article 19 of the Cyber Resilience Act?

Article 19 of the Cyber Resilience Act binds importer.

When does Article 19 of the Cyber Resilience Act apply?

Article 19 applies from 11 December 2027.

Cyber Resilience Act · Article 19

Obligations of importers

Binds: importer
Applies from: 11. Dezember 2027
Evidence: process

Article 19(1): Obligations of importers

importer · Article 19(1)

Obligations of importers 1. Importers shall place on the market only products with digital elements that comply with the essential cybersecurity requirements set out in Part I of Annex I and where the processes put in place by the manufacturer comply with the essential cybersecurity requirements set out in Part II of Annex I.

How to satisfy it: Importers carry a two-sided check: the product against Annex I Part I and the manufacturer's processes against Part II. Under Articles 21 and 22 an importer can inherit full manufacturer obligations.

Article 19(1) on EUR-Lex · as of 2026-08-13 · Regulation (EU) 2024/2847

Every quoted requirement on this page is verbatim Official Journal text. The surrounding guidance is Legalithm’s commentary and is not regulation. This page states the obligation and its legal basis; it is not legal advice, and the corpus has not been reviewed by counsel.