InsideCRA
InsideCRA › Recitals › Recital 126

Regulation (EU) 2024/2847 · Preamble

Recital 126

LAW Official text

(126) Economic operators should be provided with sufficient time to adapt to the requirements set out in this Regulation. This Regulation should apply from 11 December 2027, with exception of the reporting obligations concerning actively exploited vulnerabilities and severe incidents having an impact on the security of products with digital elements, which should apply from 11 September 2026 and of the provisions on notification of conformity assessment bodies, which should apply from 11 June 2026.

BINDING Source: Regulation (EU) 2024/2847 (Cyber Resilience Act) · publisher European Union · captured 2026-09-16 · snapshot sha256:27b7c6c64c773001… · CELEX 32024R2847
Recitals are the Regulation's stated reasoning. Obligations live in the articles; the recitals inform how those obligations are read.

← Recital 125 · All recitals · Recital 127 →