REGULATION (EU) 2024/2847 · 23 OCTOBER 2024 · AS CORRECTED

Cyber Resilience Act

Regulation of the European Parliament and of the Council on horizontal cybersecurity requirements for products with digital elements and amending Regulations (EU) No 168/2013 and (EU) 2019/1020 and Directive (EU) 2020/1828 (Cyber Resilience Act)

Text as corrected by the corrigenda published in OJ L, 2024/90780, 5.12.2024, OJ L, 2025/90555, 2.7.2025 and OJ L, 2025/90828, 17.10.2025.

OJ L, 2024/2847, 20.11.2024Publication

Prepared by Digiphile – specialist data protection lawyers.

ARTICLES BY CHAPTER

CHAPTER IGeneral provisions

Art. 1 Art. 2 Art. 3 Art. 4 Art. 5 Art. 6 Art. 7 Art. 8 Art. 9 Art. 10 Art. 11 Art. 12

CHAPTER IIObligations of economic operators and provisions in relation to free and open-source software

Art. 13 Art. 14 Art. 15 Art. 16 Art. 17 Art. 18 Art. 19 Art. 20 Art. 21 Art. 22 Art. 23 Art. 24 Art. 25 Art. 26

CHAPTER IIIConformity of the product with digital elements

Art. 27 Art. 28 Art. 29 Art. 30 Art. 31 Art. 32 Art. 33 Art. 34

CHAPTER IVNotification of conformity assessment bodies

Art. 35 Art. 36 Art. 37 Art. 38 Art. 39 Art. 40 Art. 41 Art. 42 Art. 43 Art. 44 Art. 45 Art. 46 Art. 47 Art. 48 Art. 49 Art. 50 Art. 51

CHAPTER VMarket surveillance and enforcement

Art. 52 Art. 53 Art. 54 Art. 55 Art. 56 Art. 57 Art. 58 Art. 59 Art. 60

CHAPTER VIDelegated powers and committee procedure

Art. 61 Art. 62

CHAPTER VIIConfidentiality and penalties

Art. 63 Art. 64 Art. 65

CHAPTER VIIITransitional and final provisions

Art. 66 Art. 67 Art. 68 Art. 69 Art. 70 Art. 71

Annexes

ANNEX IEssential cybersecurity requirements ANNEX IIInformation and instructions to the user ANNEX IIIImportant products with digital elements ANNEX IVCritical products with digital elements ANNEX VEU declaration of conformity ANNEX VISimplified EU declaration of conformity ANNEX VIIContent of the technical documentation ANNEX VIIIConformity assessment procedures