Who must comply with Article 13 of the Cyber Resilience Act?

Article 13 of the Cyber Resilience Act binds manufacturer.

When does Article 13 of the Cyber Resilience Act apply?

Article 13 applies from 11 December 2027.

Cyber Resilience Act · Article 13

Obligations of manufacturers

Binds: manufacturer
Applies from: 11 December 2027
Evidence: document

Article 13(1): Obligations of manufacturers

manufacturer · Article 13(1)

Obligations of manufacturers 1. When placing a product with digital elements on the market, manufacturers shall ensure that it has been designed, developed and produced in accordance with the essential cybersecurity requirements set out in Part I of Annex I.

How to satisfy it: Paragraph 1 is the anchor obligation the rest of the Regulation hangs off. Note it binds at the moment of placing on the market, so the evidence must predate launch.

Article 13(1) on EUR-Lex · as of 2026-08-13 · Regulation (EU) 2024/2847

Every quoted requirement on this page is verbatim Official Journal text. The surrounding guidance is Legalithm’s commentary and is not regulation. This page states the obligation and its legal basis; it is not legal advice, and the corpus has not been reviewed by counsel.