OFFICIAL TEXTRegulation (EU) 2024/2847·Official language version: English (EN)··Retrieved 2 November 2026·View on EUR-Lex
You are reading a consolidation made by regulation-cra.eu: the Official Journal text with its corrigenda and the amendments made by Regulation (EU) 2025/327 to Articles 13(4), 31(3) and 32(5a), which apply from 26 March 2027 (date to be verified). It is not an official consolidated version: only the texts published in the Official Journal are authentic. Versions and sources
Official text of Article 2
OFFICIAL TEXTVerbatim, as published. Not rewritten.
1.
This Regulation applies to products with digital elements made available on the market, the intended purpose or reasonably foreseeable use of which includes a direct or indirect logical or physical data connection to a device or network.
2.
This Regulation does not apply to products with digital elements to which the following Union legal acts apply:
(a)
Regulation (EU) 2017/745;
(b)
Regulation (EU) 2017/746;
(c)
Regulation (EU) 2019/2144.
3.
This Regulation does not apply to products with digital elements that have been certified in accordance with Regulation (EU) 2018/1139.
4.
This Regulation does not apply to equipment that falls within the scope of Directive 2014/90/EU of the European Parliament and of the Council(36).
5.
The application of this Regulation to products with digital elements covered by other Union rules laying down requirements that address all or some of the risks covered by the essential cybersecurity requirements set out in Annex I may be limited or excluded where:
(a)
such limitation or exclusion is consistent with the overall regulatory framework that applies to those products; and
(b)
the sectoral rules achieve the same or a higher level of protection as that provided for by this Regulation.
The Commission is empowered to adopt delegated acts in accordance with Article 61 to supplement this Regulation by specifying whether such limitation or exclusion is necessary, the products and rules concerned, as well as the scope of the limitation, if relevant.
6.
This Regulation does not apply to spare parts that are made available on the market to replace identical components in products with digital elements and that are manufactured according to the same specifications as the components that they are intended to replace.
7.
This Regulation does not apply to products with digital elements developed or modified exclusively for national security or defence purposes or to products specifically designed to process classified information.
8.
The obligations laid down in this Regulation shall not entail the supply of information the disclosure of which would be contrary to the essential interests of Member States’ national security, public security or defence.
NOTES IN THE OFFICIAL TEXT
(36)
Directive 2014/90/EU of the European Parliament and of the Council of 23 July 2014 on marine equipment and repealing Council Directive 96/98/EC (OJ L 257, 28.8.2014, p. 146).
regulation-cra.eu/regulation/articles/2 · Regulation (EU) 2024/2847 · EN · OJ L, 2024/2847, 20.11.2024 · consolidated by regulation-cra.eu (2025/327, from 26.3.2027) · retrieved 2026-11-02 · Only the Official Journal text is authentic.
Audience measurement
We would like to count visits on our own server (pseudonymous identifier, pages viewed, downloads) to learn which content is useful. No advertising, no third-party tracker. Your choice does not change access to the content. Privacy policy