{"release":{"id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","published":"2026-11-01T16:41:30Z","pinned":false},"limits":{"coverage":{"history":"full","held_since":"2024-11-20","gaps":[],"covered":["CRA L1","L2/L3 → CRA links: implements, explains"],"not_covered":["national guidance","court decisions"]},"freshness":{"release_id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","release_published":"2026-11-01T16:41:30Z","checked_at":null,"checked_against":null},"truncation":{"shown":10,"total":10,"capped":false,"cap":2000,"next_cursor":null},"failures":[],"incomplete":[]},"page":{"path":"/cra/map","url":"https://www.headlesslaw.com/cra/map","title":"Map of the law — CRA","work_id":"cra","date_state":"current","as_of":"2026-11-01"},"act":{"work_id":"cra","name":"CRA","path":"/cra","title":"Regulation (EU) 2024/2847","celex":"32024R2847"},"as_of":"2026-11-01","date_state":"current","select":null,"selection":null,"filters":{"level":["L2","L3"],"type":["implements","explains"]},"parts":[{"key":"I","name":"Chapter I — General provisions"},{"key":"II","name":"Chapter II — Obligations of economic operators and provisions in relation to free and open-source software"},{"key":"III","name":"Chapter III — Conformity of the product with digital elements"},{"key":"IV","name":"Chapter IV — Notification of conformity assessment bodies"},{"key":"V","name":"Chapter V — Market surveillance and enforcement"},{"key":"VI","name":"Chapter VI — Delegated powers and committee procedure"},{"key":"VII","name":"Chapter VII — Confidentiality and penalties"},{"key":"VIII","name":"Chapter VIII — Transitional and final provisions"}],"articles":[{"key":"act","kind":"act","label":"Whole act","heading":null,"path":"/cra","part":"","status_on_date":"anchor","x_index":0},{"key":"recitals","kind":"recitals","label":"Recitals","heading":null,"path":"/cra/recitals","part":"","status_on_date":"in_force","x_index":1},{"key":"71","kind":"article","label":"Article 71","heading":"Entry into force and application","path":"/cra/articles/71","part":"VIII","status_on_date":"in_force","x_index":2},{"key":"1","kind":"article","label":"Article 1","heading":"Subject matter","path":"/cra/articles/1","part":"I","status_on_date":"in_force","x_index":3},{"key":"2","kind":"article","label":"Article 2","heading":"Scope","path":"/cra/articles/2","part":"I","status_on_date":"in_force","x_index":4},{"key":"3","kind":"article","label":"Article 3","heading":"Definitions","path":"/cra/articles/3","part":"I","status_on_date":"in_force","x_index":5},{"key":"4","kind":"article","label":"Article 4","heading":"Free movement","path":"/cra/articles/4","part":"II","status_on_date":"in_force","x_index":6},{"key":"5","kind":"article","label":"Article 5","heading":"Procurement or use of products with digital elements","path":"/cra/articles/5","part":"II","status_on_date":"in_force","x_index":7},{"key":"6","kind":"article","label":"Article 6","heading":"Requirements for products with digital elements","path":"/cra/articles/6","part":"II","status_on_date":"in_force","x_index":8},{"key":"7","kind":"article","label":"Article 7","heading":"Important products with digital elements","path":"/cra/articles/7","part":"II","status_on_date":"in_force","x_index":9},{"key":"8","kind":"article","label":"Article 8","heading":"Critical products with digital elements","path":"/cra/articles/8","part":"II","status_on_date":"in_force","x_index":10},{"key":"9","kind":"article","label":"Article 9","heading":"Stakeholder consultation","path":"/cra/articles/9","part":"II","status_on_date":"in_force","x_index":11},{"key":"10","kind":"article","label":"Article 10","heading":"Enhancing skills in a cyber resilient digital environment","path":"/cra/articles/10","part":"II","status_on_date":"in_force","x_index":12},{"key":"11","kind":"article","label":"Article 11","heading":"General product safety","path":"/cra/articles/11","part":"II","status_on_date":"in_force","x_index":13},{"key":"12","kind":"article","label":"Article 12","heading":"High-risk AI systems","path":"/cra/articles/12","part":"II","status_on_date":"in_force","x_index":14},{"key":"13","kind":"article","label":"Article 13","heading":"Obligations of manufacturers","path":"/cra/articles/13","part":"II","status_on_date":"in_force","x_index":15},{"key":"14","kind":"article","label":"Article 14","heading":"Reporting obligations of manufacturers","path":"/cra/articles/14","part":"II","status_on_date":"in_force","x_index":16},{"key":"15","kind":"article","label":"Article 15","heading":"Voluntary reporting","path":"/cra/articles/15","part":"II","status_on_date":"in_force","x_index":17},{"key":"16","kind":"article","label":"Article 16","heading":"Establishment of a single reporting platform","path":"/cra/articles/16","part":"II","status_on_date":"in_force","x_index":18},{"key":"17","kind":"article","label":"Article 17","heading":"Other provisions related to reporting","path":"/cra/articles/17","part":"II","status_on_date":"in_force","x_index":19},{"key":"18","kind":"article","label":"Article 18","heading":"Authorised representatives","path":"/cra/articles/18","part":"II","status_on_date":"in_force","x_index":20},{"key":"19","kind":"article","label":"Article 19","heading":"Obligations of importers","path":"/cra/articles/19","part":"II","status_on_date":"in_force","x_index":21},{"key":"20","kind":"article","label":"Article 20","heading":"Obligations of distributors","path":"/cra/articles/20","part":"II","status_on_date":"in_force","x_index":22},{"key":"21","kind":"article","label":"Article 21","heading":"Cases in which obligations of manufacturers apply to importers and distributors","path":"/cra/articles/21","part":"II","status_on_date":"in_force","x_index":23},{"key":"22","kind":"article","label":"Article 22","heading":"Other cases in which obligations of manufacturers apply","path":"/cra/articles/22","part":"II","status_on_date":"in_force","x_index":24},{"key":"23","kind":"article","label":"Article 23","heading":"Identification of economic operators","path":"/cra/articles/23","part":"II","status_on_date":"in_force","x_index":25},{"key":"24","kind":"article","label":"Article 24","heading":"Obligations of open-source software stewards","path":"/cra/articles/24","part":"II","status_on_date":"in_force","x_index":26},{"key":"25","kind":"article","label":"Article 25","heading":"Security attestation of free and open-source software","path":"/cra/articles/25","part":"II","status_on_date":"in_force","x_index":27},{"key":"26","kind":"article","label":"Article 26","heading":"Guidance","path":"/cra/articles/26","part":"II","status_on_date":"in_force","x_index":28},{"key":"27","kind":"article","label":"Article 27","heading":"Presumption of conformity","path":"/cra/articles/27","part":"III","status_on_date":"in_force","x_index":29},{"key":"28","kind":"article","label":"Article 28","heading":"EU declaration of conformity","path":"/cra/articles/28","part":"III","status_on_date":"in_force","x_index":30},{"key":"29","kind":"article","label":"Article 29","heading":"General principles of the CE marking","path":"/cra/articles/29","part":"III","status_on_date":"in_force","x_index":31},{"key":"30","kind":"article","label":"Article 30","heading":"Rules and conditions for affixing the CE marking","path":"/cra/articles/30","part":"III","status_on_date":"in_force","x_index":32},{"key":"31","kind":"article","label":"Article 31","heading":"Technical documentation","path":"/cra/articles/31","part":"III","status_on_date":"in_force","x_index":33},{"key":"32","kind":"article","label":"Article 32","heading":"Conformity assessment procedures for products with digital elements","path":"/cra/articles/32","part":"III","status_on_date":"in_force","x_index":34},{"key":"33","kind":"article","label":"Article 33","heading":"Support measures for microenterprises and small and medium-sized enterprises, including start-ups","path":"/cra/articles/33","part":"III","status_on_date":"in_force","x_index":35},{"key":"34","kind":"article","label":"Article 34","heading":"Mutual recognition agreements","path":"/cra/articles/34","part":"III","status_on_date":"in_force","x_index":36},{"key":"35","kind":"article","label":"Article 35","heading":"Notification","path":"/cra/articles/35","part":"IV","status_on_date":"in_force","x_index":37},{"key":"36","kind":"article","label":"Article 36","heading":"Notifying authorities","path":"/cra/articles/36","part":"IV","status_on_date":"in_force","x_index":38},{"key":"37","kind":"article","label":"Article 37","heading":"Requirements relating to notifying authorities","path":"/cra/articles/37","part":"IV","status_on_date":"in_force","x_index":39},{"key":"38","kind":"article","label":"Article 38","heading":"Information obligation on notifying authorities","path":"/cra/articles/38","part":"IV","status_on_date":"in_force","x_index":40},{"key":"39","kind":"article","label":"Article 39","heading":"Requirements relating to notified bodies","path":"/cra/articles/39","part":"IV","status_on_date":"in_force","x_index":41},{"key":"40","kind":"article","label":"Article 40","heading":"Presumption of conformity of notified bodies","path":"/cra/articles/40","part":"IV","status_on_date":"in_force","x_index":42},{"key":"41","kind":"article","label":"Article 41","heading":"Subsidiaries of and subcontracting by notified bodies","path":"/cra/articles/41","part":"IV","status_on_date":"in_force","x_index":43},{"key":"42","kind":"article","label":"Article 42","heading":"Application for notification","path":"/cra/articles/42","part":"IV","status_on_date":"in_force","x_index":44},{"key":"43","kind":"article","label":"Article 43","heading":"Notification procedure","path":"/cra/articles/43","part":"IV","status_on_date":"in_force","x_index":45},{"key":"44","kind":"article","label":"Article 44","heading":"Identification numbers and lists of notified bodies","path":"/cra/articles/44","part":"IV","status_on_date":"in_force","x_index":46},{"key":"45","kind":"article","label":"Article 45","heading":"Changes to notifications","path":"/cra/articles/45","part":"IV","status_on_date":"in_force","x_index":47},{"key":"46","kind":"article","label":"Article 46","heading":"Challenge of the competence of notified bodies","path":"/cra/articles/46","part":"IV","status_on_date":"in_force","x_index":48},{"key":"47","kind":"article","label":"Article 47","heading":"Operational obligations of notified bodies","path":"/cra/articles/47","part":"IV","status_on_date":"in_force","x_index":49},{"key":"48","kind":"article","label":"Article 48","heading":"Appeal against decisions of notified bodies","path":"/cra/articles/48","part":"IV","status_on_date":"in_force","x_index":50},{"key":"49","kind":"article","label":"Article 49","heading":"Information obligation on notified bodies","path":"/cra/articles/49","part":"IV","status_on_date":"in_force","x_index":51},{"key":"50","kind":"article","label":"Article 50","heading":"Exchange of experience","path":"/cra/articles/50","part":"IV","status_on_date":"in_force","x_index":52},{"key":"51","kind":"article","label":"Article 51","heading":"Coordination of notified bodies","path":"/cra/articles/51","part":"IV","status_on_date":"in_force","x_index":53},{"key":"52","kind":"article","label":"Article 52","heading":"Market surveillance and control of products with digital elements in the Union market","path":"/cra/articles/52","part":"V","status_on_date":"in_force","x_index":54},{"key":"53","kind":"article","label":"Article 53","heading":"Access to data and documentation","path":"/cra/articles/53","part":"V","status_on_date":"in_force","x_index":55},{"key":"54","kind":"article","label":"Article 54","heading":"Procedure at national level concerning products with digital elements presenting a significant cybersecurity risk","path":"/cra/articles/54","part":"V","status_on_date":"in_force","x_index":56},{"key":"55","kind":"article","label":"Article 55","heading":"Union safeguard procedure","path":"/cra/articles/55","part":"V","status_on_date":"in_force","x_index":57},{"key":"56","kind":"article","label":"Article 56","heading":"Procedure at Union level concerning products with digital elements presenting a significant cybersecurity risk","path":"/cra/articles/56","part":"V","status_on_date":"in_force","x_index":58},{"key":"57","kind":"article","label":"Article 57","heading":"Compliant products with digital elements which present a significant cybersecurity risk","path":"/cra/articles/57","part":"V","status_on_date":"in_force","x_index":59},{"key":"58","kind":"article","label":"Article 58","heading":"Formal non-compliance","path":"/cra/articles/58","part":"V","status_on_date":"in_force","x_index":60},{"key":"59","kind":"article","label":"Article 59","heading":"Joint activities of market surveillance authorities","path":"/cra/articles/59","part":"V","status_on_date":"in_force","x_index":61},{"key":"60","kind":"article","label":"Article 60","heading":"Sweeps","path":"/cra/articles/60","part":"V","status_on_date":"in_force","x_index":62},{"key":"61","kind":"article","label":"Article 61","heading":"Exercise of the delegation","path":"/cra/articles/61","part":"VI","status_on_date":"in_force","x_index":63},{"key":"62","kind":"article","label":"Article 62","heading":"Committee procedure","path":"/cra/articles/62","part":"VI","status_on_date":"in_force","x_index":64},{"key":"63","kind":"article","label":"Article 63","heading":"Confidentiality","path":"/cra/articles/63","part":"VII","status_on_date":"in_force","x_index":65},{"key":"64","kind":"article","label":"Article 64","heading":"Penalties","path":"/cra/articles/64","part":"VII","status_on_date":"in_force","x_index":66},{"key":"65","kind":"article","label":"Article 65","heading":"Representative actions","path":"/cra/articles/65","part":"VII","status_on_date":"in_force","x_index":67},{"key":"66","kind":"article","label":"Article 66","heading":"Amendment to Regulation (EU) 2019/1020","path":"/cra/articles/66","part":"VIII","status_on_date":"in_force","x_index":68},{"key":"67","kind":"article","label":"Article 67","heading":"Amendment to Directive (EU) 2020/1828","path":"/cra/articles/67","part":"VIII","status_on_date":"in_force","x_index":69},{"key":"68","kind":"article","label":"Article 68","heading":"Amendment to Regulation (EU) No 168/2013","path":"/cra/articles/68","part":"VIII","status_on_date":"in_force","x_index":70},{"key":"69","kind":"article","label":"Article 69","heading":"Transitional provisions","path":"/cra/articles/69","part":"VIII","status_on_date":"in_force","x_index":71},{"key":"70","kind":"article","label":"Article 70","heading":"Evaluation and review","path":"/cra/articles/70","part":"VIII","status_on_date":"in_force","x_index":72},{"key":"annex-vi","kind":"annex","label":"Annex VI","heading":"SIMPLIFIED EU DECLARATION OF CONFORMITY","path":"/cra/annexes/annex-vi","part":"Annexes","status_on_date":"in_force","x_index":73},{"key":"annex-iv","kind":"annex","label":"Annex IV","heading":"CRITICAL PRODUCTS WITH DIGITAL ELEMENTS","path":"/cra/annexes/annex-iv","part":"Annexes","status_on_date":"in_force","x_index":74},{"key":"annex-iii","kind":"annex","label":"Annex III","heading":"IMPORTANT PRODUCTS WITH DIGITAL ELEMENTS","path":"/cra/annexes/annex-iii","part":"Annexes","status_on_date":"in_force","x_index":75},{"key":"annex-vii","kind":"annex","label":"Annex VII","heading":"CONTENT OF THE TECHNICAL DOCUMENTATION","path":"/cra/annexes/annex-vii","part":"Annexes","status_on_date":"in_force","x_index":76},{"key":"annex-v","kind":"annex","label":"Annex V","heading":"EU DECLARATION OF CONFORMITY","path":"/cra/annexes/annex-v","part":"Annexes","status_on_date":"in_force","x_index":77},{"key":"annex-viii","kind":"annex","label":"Annex VIII","heading":"CONFORMITY ASSESSMENT PROCEDURES","path":"/cra/annexes/annex-viii","part":"Annexes","status_on_date":"in_force","x_index":78},{"key":"annex-ii","kind":"annex","label":"Annex II","heading":"INFORMATION AND INSTRUCTIONS TO THE USER","path":"/cra/annexes/annex-ii","part":"Annexes","status_on_date":"in_force","x_index":79},{"key":"annex-i","kind":"annex","label":"Annex I","heading":"ESSENTIAL CYBERSECURITY REQUIREMENTS","path":"/cra/annexes/annex-i","part":"Annexes","status_on_date":"in_force","x_index":80}],"nodes":[{"work_id":"spaces/cra/level-2/delegated-acts/2025-1535-exclusion-for-certain-products-with-digital-elements","path":"/cra/level-2/delegated-acts/2025-1535-exclusion-for-certain-products-with-digital-elements","href":"/cra/level-2/delegated-acts/2025-1535-exclusion-for-certain-products-with-digital-elements","level":"L2","label":"2025/1535","short_title":"Delegated act — Exclusion for certain products with digital elements [in force]","legal_nature":"binding_adopted","source_line":"Commission Delegated Regulation (EU) 2025/1535 · binding · OJ L, 2025/1535, 29.10.2025 · dated 29 Jul 2025 [in force]"},{"work_id":"spaces/cra/level-2/implementing-acts/2025-2392-categories-of-important-and-critical-products","path":"/cra/level-2/implementing-acts/2025-2392-categories-of-important-and-critical-products","href":"/cra/level-2/implementing-acts/2025-2392-categories-of-important-and-critical-products","level":"L2","label":"2025/2392","short_title":"Implementing act — Categories of important and critical products [in force]","legal_nature":"binding_adopted","source_line":"Commission Implementing Regulation (EU) 2025/2392 · binding · OJ L, 2025/2392, 1.12.2025 · dated 28 Nov 2025 [in force]"},{"work_id":"spaces/cra/level-2/delegated-acts/2026-881-delaying-the-dissemination-of-notifications","path":"/cra/level-2/delegated-acts/2026-881-delaying-the-dissemination-of-notifications","href":"/cra/level-2/delegated-acts/2026-881-delaying-the-dissemination-of-notifications","level":"L2","label":"2026/881","short_title":"Delegated act — Delaying the dissemination of notifications [in force]","legal_nature":"binding_adopted","source_line":"Commission Delegated Regulation (EU) 2026/881 · binding · OJ L, 2026/881, 20.4.2026 · dated 11 Dec 2025 [in force]"},{"work_id":"spaces/cra/level-3/q-and-a/commission/commission-cra-qa-implementation","path":"/cra/level-3/q-and-a/commission/commission-cra-qa-implementation","href":"/cra/level-3/q-and-a/commission/commission-cra-qa-implementation","level":"L3","label":"Commission","short_title":"Q&A — Cyber Resilience Act implementation [in force]","legal_nature":"not_legislation","source_line":"Answer by the European Commission · not legislation · dated 3 Dec 2025 [in force]"},{"work_id":"spaces/cra/level-3/q-and-a/enisa/enisa-cra-srp-faq","path":"/cra/level-3/q-and-a/enisa/enisa-cra-srp-faq","href":"/cra/level-3/q-and-a/enisa/enisa-cra-srp-faq","level":"L3","label":"ENISA","short_title":"Q&A — Cyber Resilience Act Single Reporting Platform [in force]","legal_nature":"not_legislation","source_line":"Answer by ENISA · not legislation · dated 15 Oct 2026 [in force]"},{"work_id":"spaces/cra/level-3/guidelines/commission-c-2026-5252-cra-application-guidance","path":"/cra/level-3/guidelines/commission-c-2026-5252-cra-application-guidance","href":"/cra/level-3/guidelines/commission-c-2026-5252-cra-application-guidance","level":"L3","label":"C(2026) 5252","short_title":"Guideline — Application of the Cyber Resilience Act [draft]","legal_nature":"not_legislation","source_line":"Guidelines by the European Commission · not legislation · dated 27 Jul 2026 [draft]"},{"work_id":"spaces/cra/level-3/reports-and-advice/enisa-2026-technical-competence-cra-notified-bodies","path":"/cra/level-3/reports-and-advice/enisa-2026-technical-competence-cra-notified-bodies","href":"/cra/level-3/reports-and-advice/enisa-2026-technical-competence-cra-notified-bodies","level":"L3","label":"ENISA version 1.0","short_title":"Report — Technical competence requirements for CRA notified bodies [final]","legal_nature":"not_legislation","source_line":"Report by ENISA · not legislation [final]"}],"edges":[{"edge_id":"8de2e20f3cce7c2402a9","type":"answers","layer":"explains","scope":"act","src":"spaces/cra/level-3/q-and-a/commission/commission-cra-qa-implementation","src_unit":"spaces/cra/level-3/q-and-a/commission/commission-cra-qa-implementation/page","dst_unit":"act","src_from":"2025-12-03","src_until":null},{"edge_id":"7725d49c3f2bec2d6a3f","type":"implements","layer":"implements","scope":"unit","src":"spaces/cra/level-2/delegated-acts/2025-1535-exclusion-for-certain-products-with-digital-elements","src_unit":"spaces/cra/level-2/delegated-acts/2025-1535-exclusion-for-certain-products-with-digital-elements/head","dst_unit":"2","src_from":"2025-11-18","src_until":null},{"edge_id":"966c56474ebb0862c01c","type":"implements","layer":"implements","scope":"unit","src":"spaces/cra/level-2/implementing-acts/2025-2392-categories-of-important-and-critical-products","src_unit":"spaces/cra/level-2/implementing-acts/2025-2392-categories-of-important-and-critical-products/head","dst_unit":"7","src_from":"2025-12-21","src_until":null},{"edge_id":"f5bfa4319a3c895549d8","type":"implements","layer":"implements","scope":"unit","src":"spaces/cra/level-2/delegated-acts/2026-881-delaying-the-dissemination-of-notifications","src_unit":"spaces/cra/level-2/delegated-acts/2026-881-delaying-the-dissemination-of-notifications/head","dst_unit":"14","src_from":"2026-05-10","src_until":null},{"edge_id":"2441706b69108d5b3a30","type":"answers","layer":"explains","scope":"unit","src":"spaces/cra/level-3/q-and-a/enisa/enisa-cra-srp-faq","src_unit":"spaces/cra/level-3/q-and-a/enisa/enisa-cra-srp-faq/page","dst_unit":"14","src_from":"2026-10-15","src_until":null},{"edge_id":"8f0f6e11cf1e30694730","type":"answers","layer":"explains","scope":"unit","src":"spaces/cra/level-3/q-and-a/enisa/enisa-cra-srp-faq","src_unit":"spaces/cra/level-3/q-and-a/enisa/enisa-cra-srp-faq/page","dst_unit":"15","src_from":"2026-10-15","src_until":null},{"edge_id":"07b12c0753f9b5e698f3","type":"answers","layer":"explains","scope":"unit","src":"spaces/cra/level-3/q-and-a/enisa/enisa-cra-srp-faq","src_unit":"spaces/cra/level-3/q-and-a/enisa/enisa-cra-srp-faq/page","dst_unit":"16","src_from":"2026-10-15","src_until":null},{"edge_id":"3cf025b7d1967430af6d","type":"answers","layer":"explains","scope":"unit","src":"spaces/cra/level-3/q-and-a/enisa/enisa-cra-srp-faq","src_unit":"spaces/cra/level-3/q-and-a/enisa/enisa-cra-srp-faq/page","dst_unit":"17","src_from":"2026-10-15","src_until":null},{"edge_id":"40a3dd1cbd3fc593a774","type":"guides","layer":"explains","scope":"unit","src":"spaces/cra/level-3/guidelines/commission-c-2026-5252-cra-application-guidance","src_unit":"spaces/cra/level-3/guidelines/commission-c-2026-5252-cra-application-guidance/page","dst_unit":"26","src_from":"2026-07-27","src_until":null},{"edge_id":"e9f1eb9075db71aeddfb","type":"guides","layer":"explains","scope":"unit","src":"spaces/cra/level-3/reports-and-advice/enisa-2026-technical-competence-cra-notified-bodies","src_unit":"spaces/cra/level-3/reports-and-advice/enisa-2026-technical-competence-cra-notified-bodies/page","dst_unit":"39","src_from":"0001-01-01","src_until":null}],"counts":{"articles_with_links":8,"l2_nodes":3,"l3_nodes":4,"edges":10,"act_level_edges":1,"undated_edges":1,"not_in_force_sources":0},"map_url":"https://www.headlesslaw.com/cra/map","note":"edges = the relations of the act's units on as_of (same rule as <page>/relations?at=); src_from 0001-01-01 = no date recorded for the source (shown on every date)"}