> For the complete documentation index, see [llms.txt](https://www.headlesslaw.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://www.headlesslaw.com/cra/readme.md). # CRA *In force · Consolidated version of 20 November 2024 ·* [*Official source*](https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02024R2847-20241120) **Regulation (EU) 2024/2847** — of the European Parliament and of the Council of 23 October 2024 on horizontal cybersecurity requirements for products with digital elements and amending Regulations (EU) No 168/2013 and (EU) 2019/1020 and Directive (EU) 2020/1828 (Cyber Resilience Act) The full text is available article by article, one page per article (`articles/`). Every numbered paragraph and point carries a stable anchor (`#p-3` for paragraph 3, `#p-3-a` for its point (a)), so any provision can be cited with a direct link. The English consolidated manifestation from CELLAR is reproduced verbatim; the official text remains the EU publication at [EUR-Lex](https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02024R2847-20241120). ### Contents #### [Chapter I — General provisions](/cra/chapters/i.md) * [Article 1 — Subject matter](/cra/articles/1.md) * [Article 2 — Scope](/cra/articles/2.md) * [Article 3 — Definitions](/cra/articles/3.md) #### [Chapter II — Obligations of economic operators and provisions in relation to free and open-source software](/cra/chapters/ii.md) * [Article 4 — Free movement](/cra/articles/4.md) * [Article 5 — Procurement or use of products with digital elements](/cra/articles/5.md) * [Article 6 — Requirements for products with digital elements](/cra/articles/6.md) * [Article 7 — Important products with digital elements](/cra/articles/7.md) * [Article 8 — Critical products with digital elements](/cra/articles/8.md) * [Article 9 — Stakeholder consultation](/cra/articles/9.md) * [Article 10 — Enhancing skills in a cyber resilient digital environment](/cra/articles/10.md) * [Article 11 — General product safety](/cra/articles/11.md) * [Article 12 — High-risk AI systems](/cra/articles/12.md) * [Article 13 — Obligations of manufacturers](/cra/articles/13.md) * [Article 14 — Reporting obligations of manufacturers](/cra/articles/14.md) * [Article 15 — Voluntary reporting](/cra/articles/15.md) * [Article 16 — Establishment of a single reporting platform](/cra/articles/16.md) * [Article 17 — Other provisions related to reporting](/cra/articles/17.md) * [Article 18 — Authorised representatives](/cra/articles/18.md) * [Article 19 — Obligations of importers](/cra/articles/19.md) * [Article 20 — Obligations of distributors](/cra/articles/20.md) * [Article 21 — Cases in which obligations of manufacturers apply to importers and distributors](/cra/articles/21.md) * [Article 22 — Other cases in which obligations of manufacturers apply](/cra/articles/22.md) * [Article 23 — Identification of economic operators](/cra/articles/23.md) * [Article 24 — Obligations of open-source software stewards](/cra/articles/24.md) * [Article 25 — Security attestation of free and open-source software](/cra/articles/25.md) * [Article 26 — Guidance](/cra/articles/26.md) #### [Chapter III — Conformity of the product with digital elements](/cra/chapters/iii.md) * [Article 27 — Presumption of conformity](/cra/articles/27.md) * [Article 28 — EU declaration of conformity](/cra/articles/28.md) * [Article 29 — General principles of the CE marking](/cra/articles/29.md) * [Article 30 — Rules and conditions for affixing the CE marking](/cra/articles/30.md) * [Article 31 — Technical documentation](/cra/articles/31.md) * [Article 32 — Conformity assessment procedures for products with digital elements](/cra/articles/32.md) * [Article 33 — Support measures for microenterprises and small and medium-sized enterprises, including start-ups](/cra/articles/33.md) * [Article 34 — Mutual recognition agreements](/cra/articles/34.md) #### [Chapter IV — Notification of conformity assessment bodies](/cra/chapters/iv.md) * [Article 35 — Notification](/cra/articles/35.md) * [Article 36 — Notifying authorities](/cra/articles/36.md) * [Article 37 — Requirements relating to notifying authorities](/cra/articles/37.md) * [Article 38 — Information obligation on notifying authorities](/cra/articles/38.md) * [Article 39 — Requirements relating to notified bodies](/cra/articles/39.md) * [Article 40 — Presumption of conformity of notified bodies](/cra/articles/40.md) * [Article 41 — Subsidiaries of and subcontracting by notified bodies](/cra/articles/41.md) * [Article 42 — Application for notification](/cra/articles/42.md) * [Article 43 — Notification procedure](/cra/articles/43.md) * [Article 44 — Identification numbers and lists of notified bodies](/cra/articles/44.md) * [Article 45 — Changes to notifications](/cra/articles/45.md) * [Article 46 — Challenge of the competence of notified bodies](/cra/articles/46.md) * [Article 47 — Operational obligations of notified bodies](/cra/articles/47.md) * [Article 48 — Appeal against decisions of notified bodies](/cra/articles/48.md) * [Article 49 — Information obligation on notified bodies](/cra/articles/49.md) * [Article 50 — Exchange of experience](/cra/articles/50.md) * [Article 51 — Coordination of notified bodies](/cra/articles/51.md) #### [Chapter V — Market surveillance and enforcement](/cra/chapters/v.md) * [Article 52 — Market surveillance and control of products with digital elements in the Union market](/cra/articles/52.md) * [Article 53 — Access to data and documentation](/cra/articles/53.md) * [Article 54 — Procedure at national level concerning products with digital elements presenting a significant cybersecurity risk](/cra/articles/54.md) * [Article 55 — Union safeguard procedure](/cra/articles/55.md) * [Article 56 — Procedure at Union level concerning products with digital elements presenting a significant cybersecurity risk](/cra/articles/56.md) * [Article 57 — Compliant products with digital elements which present a significant cybersecurity risk](/cra/articles/57.md) * [Article 58 — Formal non-compliance](/cra/articles/58.md) * [Article 59 — Joint activities of market surveillance authorities](/cra/articles/59.md) * [Article 60 — Sweeps](/cra/articles/60.md) #### [Chapter VI — Delegated powers and committee procedure](/cra/chapters/vi.md) * [Article 61 — Exercise of the delegation](/cra/articles/61.md) * [Article 62 — Committee procedure](/cra/articles/62.md) #### [Chapter VII — Confidentiality and penalties](/cra/chapters/vii.md) * [Article 63 — Confidentiality](/cra/articles/63.md) * [Article 64 — Penalties](/cra/articles/64.md) * [Article 65 — Representative actions](/cra/articles/65.md) #### [Chapter VIII — Transitional and final provisions](/cra/chapters/viii.md) * [Article 66 — Amendment to Regulation (EU) 2019/1020](/cra/articles/66.md) * [Article 67 — Amendment to Directive (EU) 2020/1828](/cra/articles/67.md) * [Article 68 — Amendment to Regulation (EU) No 168/2013](/cra/articles/68.md) * [Article 69 — Transitional provisions](/cra/articles/69.md) * [Article 70 — Evaluation and review](/cra/articles/70.md) * [Article 71 — Entry into force and application](/cra/articles/71.md) ### Level 2 and Level 3 * [Level 3](/cra/level-3.md) --- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter: ``` GET https://www.headlesslaw.com/cra/readme.md?ask=&goal= ``` `ask` is the immediate question: it should be specific, self-contained, and written in natural language. `goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.