Council of the European Union and European Parliament 23 October 2024, Regulation (EU) 2024/2847 of the European Parliament and of the Council of 23 October 2024 on horizontal cybersecurity requirements for products with digital elements and amending Regulations (EU) No 168/2013 and (EU) 2019/1020 and Directive (EU) 2020/1828 (Cyber Resilience Act) (Text with EEA relevance)

Also known as

Regulation (EU) 2024/2847 establishes horizontal cybersecurity requirements for the design, development, and production of products with digital elements made available on the Union market, as well as mandatory vulnerability handling processes throughout their support periods. It imposes obligations on manufacturers and other economic operators, introduces classification and conformity assessment procedures for important and critical products, and mandates CE marking alongside reporting mechanisms for actively exploited vulnerabilities and severe incidents. Enforcement is ensured through market surveillance mechanisms, Union safeguard procedures, and administrative fines of up to EUR 15 000 000 or 2.5 % of total worldwide annual turnover.AI