Updated on : 27-03-2025
This draft Commission implementing regulation is adopted pursuant to an obligation stemming from the main legal act (the Cyber Resilience Act). It specifies the technical description of the products listed in Annex III and IV and which are subject to more stringent conformity assessment procedures.Specifically, as foreseen by Article 32 of the Cyber Resilience Act, important products with digital elements that fall under class I as set out in Annex III will either need to follow harmonised standards, common specifications, or European cybersecurity certification schemes, or otherwise undergo third-party conformity assessment.Important products with digital elements that fall under class II as set out in Annex III and critical products with digital elements as set out in Annex IV will need to undergo third-party conformity assessment. |