Skip to content

Recital 1 of 130

OFFICIAL TEXTRegulation (EU) 2024/2847·Official language version: English (EN)·
·Retrieved 2 November 2026·View on EUR-Lex

You are reading a consolidation made by regulation-cra.eu: the Official Journal text with its corrigenda and the amendments made by Regulation (EU) 2025/327 to Articles 13(4), 31(3) and 32(5a), which apply from 26 March 2027 (date to be verified). It is not an official consolidated version: only the texts published in the Official Journal are authentic. Versions and sources

OFFICIAL TEXTVerbatim, as published. Not rewritten.
(1)

Cybersecurity is one of the key challenges for the Union. The number and variety of connected devices will rise exponentially in the coming years. Cyberattacks represent a matter of public interest as they have a critical impact not only on the Union’s economy, but also on democracy as well as consumer safety and health. It is therefore necessary to strengthen the Union’s approach to cybersecurity, address cyber resilience at Union level and improve the functioning of the internal market by laying down a uniform legal framework for essential cybersecurity requirements for placing products with digital elements on the Union market. Two major problems adding costs for users and society should be addressed: a low level of cybersecurity of products with digital elements, reflected by widespread vulnerabilities and the insufficient and inconsistent provision of security updates to address them, and an insufficient understanding and access to information by users, preventing them from choosing products with adequate cybersecurity properties or using them in a secure manner.