InsideCRA
InsideCRA › Articles › Article 49

Regulation (EU) 2024/2847 · Chapter

Article 49 — Information obligation on notified bodies

Information duties of notified bodies: certificates do not happen in private.

LAW Official text — verbatim from the Official Journal snapshot; only the Official Journal is authentic.

1.1. Notified bodies shall inform the notifying authority of the following:
(a) any refusal, restriction, suspension or withdrawal of a certificate;
(b) any circumstances affecting the scope of and conditions for notification;
(c) any request for information which they have received from market surveillance authorities regarding conformity assessment activities;
(d) on request, conformity assessment activities performed within the scope of their notification and any other activity performed, including cross-border activities and subcontracting.

2.2. Notified bodies shall provide the other bodies notified under this Regulation carrying out similar conformity assessment activities covering the same products with digital elements with relevant information on issues relating to negative and, upon request, positive conformity assessment results.

BINDING Source: Regulation (EU) 2024/2847 (Cyber Resilience Act) · publisher European Union · captured 2026-09-16 · snapshot sha256:27b7c6c64c773001… · CELEX 32024R2847

What this article does

Article 49 wires notified bodies into the system's information flow: they inform their notifying authority of certificate refusals, restrictions, suspensions and withdrawals, of circumstances affecting the scope of and conditions for their notification, of requests for information received from market surveillance authorities about conformity assessment activities, and — on request — of assessment activities performed within the scope of their notification. They also share relevant negative (and on request, positive) assessment information with the other bodies notified for the same work.

Why cross-body sharing matters

It narrows the shopping loophole: bodies doing similar assessments of the same products receive relevant information on issues relating to negative results, so a refusal at one body is less likely to stay invisible at the next. The certificate market stays a market, but not an information-asymmetry game.

Editorial review: Claude (AI reviewer, delegated by the editor), 2026-10-08. Methodology and correction process: how this site works.

Related in the reference

Continue in the reference: Regulation map · topics · timeline.