{"release":{"id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","published":"2026-11-01T16:41:30Z","pinned":false},"limits":{"coverage":{"history":"full","held_since":"2024-11-20","gaps":[],"covered":["CRA L1"],"not_covered":["national guidance","court decisions"]},"freshness":{"release_id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","release_published":"2026-11-01T16:41:30Z","checked_at":"2026-11-01","checked_against":"EUR-Lex"},"truncation":null,"failures":[],"incomplete":[]},"page":{"path":"/cra/recitals/22","url":"https://www.headlesslaw.com/cra/recitals/22","title":"Recital 22","family":"l1_recital_view","work_id":"cra","view_of":"/cra/recitals","status":"in_force","force_status":"in_force","date_state":"current","requested_date":null,"as_of":"2026-11-01","applies_from":null,"application":null,"version_label":"Regulation (EU) 2024/2847, OJ L, 2024/2847, 20.11.2024","check":{"against":"EUR-Lex","on":"2026-11-01"},"check_result":"matched","official_url":"https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R2847","valid_from":"2024-11-20","valid_until":null,"content_id":"8733d0637913611a","versions":["2024-11-20"],"version_url":"https://www.headlesslaw.com/cra/recitals/22/versions/2024-11-20","revision_url":"https://www.headlesslaw.com/cra/recitals/22/versions/2024-11-20/rev/8733d0637913611a","versions_url":"https://www.headlesslaw.com/cra/recitals/22/versions","relations_url":"https://www.headlesslaw.com/cra/recitals/22/relations","act_url":"https://www.headlesslaw.com/cra/recitals","source_line":null,"attribution":null,"context":{"act":{"work_id":"cra","path":"/cra/recitals","name":"CRA","number":"Regulation (EU) 2024/2847","celex":"32024R2847","title_official":null,"document_date":null},"position":{"kind":"recital","key":"22","index":22,"articles":130,"annexes":0},"prev":{"path":"/cra/recitals/21","key":"21","title":"Recital 21"},"next":{"path":"/cra/recitals/23","key":"23","title":"Recital 23"},"act_anchor":""}},"provenance":{"official_url":"https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R2847","check":{"result":"matched","checked_at":"2026-11-01","against":"EUR-Lex"},"repo_path":"spaces/cra/recitals.md","unit_text_sha256":"9bde02a48b4eb4b08ec685d24d14ebf0bce9914a16f59b832f822caff1e8f3aa","note":"the unit is a byte-exact part of the act page, whose check record covers it"},"unit":{"locator":"cra/recitals/rec/22","kind":"recital","key":"22","heading":"","text":"In view of the public cybersecurity objectives of this Regulation and in order to improve the situational awareness of Member States as regards the Union’s dependency on software components and in particular on potentially free and open-source software components, a dedicated administrative cooperation group (ADCO) established by this Regulation should be able to decide to jointly undertake a Union dependency assessment. Market surveillance authorities should be able to request manufacturers of categories of products with digital elements established by ADCO to submit the software bills of materials (SBOMs) that they have generated pursuant to this Regulation. In order to protect the confidentiality of SBOMs, market surveillance authorities should submit relevant information about dependencies to ADCO in an anonymised and aggregated manner.","marks":[],"text_hash":"9bde02a48b4eb4b08ec685d24d14ebf0bce9914a16f59b832f822caff1e8f3aa","revision":1,"blocks":[{"locator":"cra/recitals/rec/22/block/1","text_hash":"9bde02a48b4eb4b08ec685d24d14ebf0bce9914a16f59b832f822caff1e8f3aa","revision":1}]}}