Amendment to Regulation (EU) 2019/1020
Article 66
In Annex I to Regulation (EU) 2019/1020, the following point is added: ‘72. Regulation (EU) 2024/2847 of the European Parliament and of the Council ( *1 ) .
Regulation (EU) 2024/2847 (CRA) CHAPTER VIII — TRANSITIONAL AND FINAL PROVISIONS
Compiled from an official source version. Later amendments or repeals may not be reflected; the official text prevails. · Read the official text ↗
Amendment to Directive (EU) 2020/1828
Article 67
In Annex I to Directive (EU) 2020/1828, the following point is added: ‘69. Regulation (EU) 2024/2847 of the European Parliament and of the Council ( *2 ) .
Amendment to Regulation (EU) No 168/2013
Article 68
In Part C1, in the table, of Annex II to Regulation (EU) No 168/2013 of the European Parliament and of the Council ( 38 ) , the following entry is added: ‘ 16 18 protection of vehicle against cyberattacks x x x x x x x x x x x x x x ’.
Transitional provisions
Article 69
1. EU type-examination certificates and approval decisions issued regarding cybersecurity requirements for products with digital elements that are subject to Union harmonisation legislation other than this Regulation shall remain valid until 11 June 2028, unless they expire before that date, or unless otherwise specified in such other Union harmonisation legislation, in which case they shall remain valid as referred to in that legislation. 2. Products with digital elements that have been placed on the market before 11 December 2027 shall be subject to the requirements set out in this Regulation only if, from that date, those products are subject to a substantial modification. 3. By way of derogation from paragraph 2 of this Article, the obligations laid down in Article 14 shall apply to all products with digital elements that fall within the scope of this Regulation that have been placed on the market before 11 December 2027.
Evaluation and review
Article 70
1. By 11 December 2030 and every four years thereafter, the Commission shall submit a report on the evaluation and review of this Regulation to the European Parliament and to the Council. Those reports shall be made public. 2. By 11 September 2028, the Commission shall, after consulting ENISA and the CSIRTs network, submit a report to the European Parliament and to the Council, assessing the effectiveness of the single reporting platform set out in Article 16, as well as the impact of the application of the cybersecurity-related grounds referred to Article 16(2) by the CSIRTs designated as coordinators on the effectiveness of the single reporting platform as regards the timely dissemination of received notifications to other relevant CSIRTs.
Entry into force and application
Article 71
1. This Regulation shall enter into force on the twentieth day following that of its publication in the Official Journal of the European Union . 2. This Regulation shall apply from 11 December 2027. However, Article 14 shall apply from 11 September 2026 and Chapter IV (Articles 35 to 51) shall apply from 11 June 2026.
Back to Regulation (EU) 2024/2847 (CRA) — full text
Articles on this page are reproduced verbatim from official open data. See the attribution line.
Source: EUR-Lex (Publications Office of the EU), © European Union, reuse permitted under Commission Decision 2011/833/EU.
What to look at next
Regulation (EU) 2024/2847 (CRA), full textChapter navigation and full text, so you can read this section in contextEuropean Union legislationEU Legal Acts by type and yearGrouped by instrument type and year of enactment, so you can find others of the same kindBrowse by type and yearEuropean Union: what this database coversWhich datasets are here, which official source they come from, and how current they areEuropean Union overview