Legalithm logo

Cyber Resilience Act · Article 18

Authorised representatives

Binds
authorised representative and manufacturer
Applies from
Evidence
document, process

Article 18(1): Authorised representatives

manufacturer · Article 18(1)

1. A manufacturer may, by a written mandate, appoint an authorised representative.

How to satisfy it: Appointing an authorised representative is optional and must be by WRITTEN mandate. It is the mechanism a non-EU manufacturer uses to have a point of contact inside the Union, and several other provisions lean on it: Annex VIII Part I (5), Part II (11), Part III (4) and Part IV (8) each let the representative discharge specific module obligations on the manufacturer's behalf.

Article 18(1) on EUR-Lex · as of 2026-08-13 · Regulation (EU) 2024/2847

Article 18(2): Authorised representatives

authorised representative · Article 18(2)

2. The obligations laid down in Article 13(1) to (11), Article 13(12), first subparagraph, and Article 13(14) shall not form part of the authorised representative’s mandate.

How to satisfy it: The non-delegable core. Article 13(1) to (11), Article 13(12) first subparagraph and Article 13(14) CANNOT be placed in the mandate, so appointing a representative never moves the substantive manufacturing duties off the manufacturer. What the representative can carry is administrative: holding documentation, answering authorities, cooperating on risk.

Article 18(2) on EUR-Lex · as of 2026-08-13 · Regulation (EU) 2024/2847

Article 18(3): Authorised representatives

authorised representative · Article 18(3)

3. An authorised representative shall perform the tasks specified in the mandate received from the manufacturer. The authorised representative shall provide a copy of the mandate to the market surveillance authorities upon request. The mandate shall allow the authorised representative to do at least the following: (a) keep the EU declaration of conformity referred to in Article 28 and the technical documentation referred to in Article 31 at the disposal of the market surveillance authorities for at least 10 years after the product with digital elements has been placed on the market or for the support period, whichever is longer; (b) further to a reasoned request from a market surveillance authority, provide that authority with all the information and documentation necessary to demonstrate the conformity of the product with digital elements; (c) cooperate with the market surveillance authorities, at their request, on any action taken to eliminate the risks posed by a product with digital elements covered by the authorised representative’s mandate.

How to satisfy it: The representative performs whatever the mandate specifies, and the mandate must permit at least three things: keeping the EU declaration of conformity and the technical documentation available to market surveillance for 10 years, answering reasoned requests with the information needed to show conformity, and cooperating on action to eliminate risk. A mandate narrower than that is defective.

Article 18(3) on EUR-Lex · as of 2026-08-13 · Regulation (EU) 2024/2847

Every quoted requirement on this page is verbatim Official Journal text. The surrounding guidance is Legalithm’s commentary and is not regulation. This page states the obligation and its legal basis; it is not legal advice, and the corpus has not been reviewed by counsel.