Regulation (EU) 2024/2847 on horizontal cybersecurity requirements for products with digital elements (Cyber Resilience Act)

Summary

The Cyber Resilience Act sets essential cybersecurity requirements for hardware and software placed on the EU market, across the whole product lifecycle. Manufacturers must handle vulnerabilities, provide security updates and report actively exploited vulnerabilities and severe incidents. Conformity is shown by CE marking, with stricter assessments for important and critical products.

Original title

Title in other languages

Regolamento (UE) 2024/2847 relativo a requisiti orizzontali di cibersicurezza per i prodotti con elementi digitali (Cyber Resilience Act)
Règlement (UE) 2024/2847 concernant des exigences de cybersécurité horizontales pour les produits comportant des éléments numériques (règlement sur la cyberrésilience)
Reglamento (UE) 2024/2847 relativo a los requisitos horizontales de ciberseguridad para los productos con elementos digitales (Reglamento de Ciberresiliencia)

Jurisdiction

European Union

Issuing body

European Parliament and Council of the European Union

Official number

Regulation (EU) 2024/2847

Type

Regulation

Date adopted

23 October 2024

Entry into force

10 December 2024

Status

In force

Available languages

English, Italian (official translation), French (official translation), Spanish (official translation), German (official translation)

Topics

Licence / terms of use

EU reuse (Decision 2011/833/EU)

Notes

Gli obblighi di segnalazione delle vulnerabilità si applicano dall'11 settembre 2026; il regolamento si applica integralmente dall'11 dicembre 2027.

Collected from

manuale

Last verified

26 October 2026 (verified by Claude (seed iniziale, da revisionare in redazione))

How to cite

APA

European Parliament and Council of the European Union. (2024). Regulation (EU) 2024/2847 on horizontal cybersecurity requirements for products with digital elements (Cyber Resilience Act) (Regulation (EU) 2024/2847). https://eur-lex.europa.eu/eli/reg/2024/2847/oj

Chicago

European Parliament and Council of the European Union. "Regulation (EU) 2024/2847 on horizontal cybersecurity requirements for products with digital elements (Cyber Resilience Act)." 23 October 2024. https://eur-lex.europa.eu/eli/reg/2024/2847/oj.

BibTeX

@misc{eu_cyber_resilience_act_2024_2847,
  author       = {{European Parliament and Council of the European Union}},
  title        = {{Regulation (EU) 2024/2847 on horizontal cybersecurity requirements for products with digital elements (Cyber Resilience Act)}},
  year         = {2024},
  note         = {Regulation (EU) 2024/2847},
  url          = {https://eur-lex.europa.eu/eli/reg/2024/2847/oj},
  urldate      = {2026-10-26}
}

Metadata and summary: CC BY 4.0 · JSON