<!-- headlesslaw {"release":{"id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","published":"2026-11-01T16:41:30Z","pinned":false},"limits":{"coverage":{"history":"full","held_since":"2024-11-20","gaps":[],"covered":["CRA L1"],"not_covered":["national guidance","court decisions"]},"freshness":{"release_id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","release_published":"2026-11-01T16:41:30Z","checked_at":"2026-11-01","checked_against":"EUR-Lex"},"truncation":null,"failures":[],"incomplete":[]},"page":{"path":"/cra/recitals/55","url":"https://www.headlesslaw.com/cra/recitals/55","title":"Recital 55","family":"l1_recital_view","work_id":"cra","view_of":"/cra/recitals","status":"in_force","force_status":"in_force","date_state":"current","requested_date":null,"as_of":"2026-11-01","applies_from":null,"application":null,"version_label":"Regulation (EU) 2024/2847, OJ L, 2024/2847, 20.11.2024","check":{"against":"EUR-Lex","on":"2026-11-01"},"check_result":"matched","official_url":"https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R2847","valid_from":"2024-11-20","valid_until":null,"content_id":"c6698d5d06e8b71d","versions":["2024-11-20"],"version_url":"https://www.headlesslaw.com/cra/recitals/55/versions/2024-11-20","revision_url":"https://www.headlesslaw.com/cra/recitals/55/versions/2024-11-20/rev/c6698d5d06e8b71d","versions_url":"https://www.headlesslaw.com/cra/recitals/55/versions","relations_url":"https://www.headlesslaw.com/cra/recitals/55/relations","act_url":"https://www.headlesslaw.com/cra/recitals","source_line":null,"attribution":null,"context":{"act":{"work_id":"cra","path":"/cra/recitals","name":"CRA","number":"Regulation (EU) 2024/2847","celex":"32024R2847","title_official":null,"document_date":null},"position":{"kind":"recital","key":"55","index":55,"articles":130,"annexes":0},"prev":{"path":"/cra/recitals/54","key":"54","title":"Recital 54"},"next":{"path":"/cra/recitals/56","key":"56","title":"Recital 56"},"act_anchor":""}}} -->
# Recital 55

*In force · Regulation (EU) 2024/2847, OJ L, 2024/2847, 20.11.2024 · Checked against EUR-Lex on 1 Nov 2026 · [Official source](https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R2847)*

Where certain essential cybersecurity requirements are not applicable to a product with digital elements, the manufacturer should include a clear justification in the cybersecurity risk assessment included in the technical documentation. This could be the case where an essential cybersecurity requirement is incompatible with the nature of a product with digital elements. For example, the intended purpose of a product with digital elements may require the manufacturer to follow widely recognised interoperability standards even if its security features are no longer considered to be state of the art. Similarly, other Union law requires manufacturers to apply specific interoperability requirements. Where an essential cybersecurity requirement is not applicable to a product with digital elements, but the manufacturer has identified cybersecurity risks in relation to that essential cybersecurity requirement, it should take measures to address those risks by other means, for instance by limiting the intended purpose of the product to trusted environments or by informing the users about those risks.