InsideCRA
InsideCRA › Articles › Article 23

Regulation (EU) 2024/2847 · Chapter

Article 23 — Identification of economic operators

Identification of economic operators: who sold you this, and who did they get it from.

LAW Official text — verbatim from the Official Journal snapshot; only the Official Journal is authentic.

1.1. Economic operators shall, on request, provide the market surveillance authorities with the following information:
(a) the name and address of any economic operator who has supplied them with a product with digital elements;
(b) where available, the name and address of any economic operator to whom they have supplied a product with digital elements.

2.2. Economic operators shall be able to present the information referred to in paragraph 1 for 10 years after they have been supplied with the product with digital elements and for 10 years after they have supplied the product with digital elements.

BINDING Source: Regulation (EU) 2024/2847 (Cyber Resilience Act) · publisher European Union · captured 2026-09-16 · snapshot sha256:27b7c6c64c773001… · CELEX 32024R2847

What this article does

Article 23 gives surveillance its traceability thread: on request, economic operators give market surveillance authorities the name and address of any economic operator that supplied them a product and, where available, of any economic operator they supplied — one hop each way — and they need to be able to present that information for 10 years after being supplied and for 10 years after supplying.

Why it exists

Enforcement against an anonymous supply chain is theatre. When an authority pulls on a non-compliant product, this article lets it walk the chain hop by hop to whoever actually carries responsibility, alongside the corrective measures authorities can demand F-047 and the documentation manufacturers keep for them F-016.

The practical translation

Keep supplier and customer records per product line, retrievable on request. For many businesses this is an ERP query, not a new system; what matters is being able to produce the records when asked, across the 10-year periods Article 23 sets.

Verified facts this page relies on

Facts are maintained and human-verified in the CEMarque Facts Table (v2026.09.4, verified 2026-09-10).

Editorial review: Claude (AI reviewer, delegated by the editor), 2026-10-08. Methodology and correction process: how this site works.

Related in the reference

Continue in the reference: Regulation map · topics · timeline.