Application dates
What applies from when
The key dates and what each one switches on.
Three dates matter most to manufacturers, and they switch on different things; Article 71 also sets an earlier date for the Chapter IV rules on notifying conformity assessment bodies.
The Regulation entered into force on 10 December 2024 F-001. Entry into force started the clocks; it did not by itself switch on product duties for manufacturers F-002 F-003.
Article 14 reporting applies from 11 September 2026 F-002. From that date, an actively exploited vulnerability triggers an early warning within 24 hours of awareness and a fuller notification within 72 hours F-028, and a severe incident affecting a product's security follows the same 24-hour and 72-hour rhythm F-029.
The Regulation applies in full from 11 December 2027 F-003. Products placed on the market before that date are subject to the Regulation only if substantially modified afterwards F-004 — but note the asymmetry: the reporting duty is not grandfathered the same way F-004, and customers and distributors may ask about conformity regardless F-105.
The mistake to avoid
Collapsing these dates into one produces wrong answers in both directions: teams either panic about full conformity a year early, or miss that the reporting duty arrives first F-002. The official text behind all of this is Article 71, with the transitional rules in Article 69 F-004.
Verified facts this page relies on
- F-001 Regulation (EU) 2024/2847 entered into force on 10 December 2024. Art. 71(1)
- F-002 Article 14 (reporting obligations of manufacturers) applies from 11 September 2026. Art. 71(2)
- F-003 The Regulation applies in full from 11 December 2027. Art. 71(2)
- F-004 Products placed on the market before 11 December 2027 are subject to the Regulation only if substantially modified after that date; Article 14 applies to them regardless. Art. 69(2)–(3)
- F-028 Actively exploited vulnerability: early warning within 24 hours of awareness; notification within 72 hours; final report within 14 days after a corrective or mitigating measure is available. Art. 14(1)–(2)
- F-029 Severe incident having an impact on the security of the product: early warning within 24 hours; incident notification within 72 hours; final report within one month after the incident notification. Art. 14(3)–(4)
- F-105 For products already on the market, conformity is not required until substantial modification, but customers and distributors may ask for it; Article 14 applies regardless. Art. 69(2)–(3)
Facts are maintained and human-verified in the CEMarque Facts Table (v2026.09.4, verified 2026-09-10).
Editorial review: Claude (AI reviewer, delegated by the editor), 2026-10-08. Methodology and correction process: how this site works.