Article 6: Requirements for products with digital elements
manufacturer · Article 6
Requirements for products with digital elements Products with digital elements shall be made available on the market only where: (a) they meet the essential cybersecurity requirements set out in Part I of Annex I, provided that they are properly installed, maintained, used for their intended purpose or under conditions which can reasonably be foreseen, and, where applicable, the necessary security updates have been installed; and (b) the processes put in place by the manufacturer comply with the essential cybersecurity requirements set out in Part II of Annex I.
How to satisfy it: The operative gating requirement, and the article the rest of Pack C hangs from. Every Annex I row states WHAT is required; this is the article that makes meeting them a condition of being on the market at all. Note the qualifier in (a), which is easy to miss and does real work: conformity is judged on the assumption that the product is properly installed, maintained and used for its intended purpose or under reasonably foreseeable conditions, and that the necessary security updates have been installed. Limb (b) extends the same gate to the manufacturer's processes under Annex I Part II, so both the product and the way it is made and maintained are gated, not just the product.
Article 6 on EUR-Lex · as of 2026-08-13 · Regulation (EU) 2024/2847