Regulation (EU) 2024/2847 · Preamble
Recital 126
LAW Official text
(126) Economic operators should be provided with sufficient time to adapt to the requirements set out in this Regulation. This Regulation should apply from 11 December 2027, with exception of the reporting obligations concerning actively exploited vulnerabilities and severe incidents having an impact on the security of products with digital elements, which should apply from 11 September 2026 and of the provisions on notification of conformity assessment bodies, which should apply from 11 June 2026.
BINDING Source: Regulation (EU) 2024/2847 (Cyber Resilience Act) · publisher European Union · captured 2026-09-16 · snapshot
sha256:27b7c6c64c773001… · CELEX 32024R2847Recitals are the Regulation's stated reasoning. Obligations live in the articles; the recitals inform how those obligations are read.