Recital 26

Exclusion of National Security, Defence and Classified Products Unofficial title

Products with digital elements that are developed or modified exclusively for national security or defence purposes or products that are specifically designed to process classified information fall outside the scope of this Regulation. Member States are encouraged to ensure the same or a higher level of protection for those products as for those falling within the scope of this Regulation.

https://cra.digiphile.law/recital/recital-26.html

Text as at 19 September 2026.

This is an unofficial convenience version of the EU Cyber Resilience Act (Regulation (EU) 2024/2847). It is presented “as is” without guarantee of accuracy, completeness or reliability. See the source text for the official version. This site was last updated in September 2026.