In view of the public cybersecurity objectives of this Regulation and in order to improve the situational awareness of Member States as regards the Union’s dependency on software components and in particular on potentially free and open-source software components, a dedicated administrative cooperation group (ADCO) established by this Regulation should be able to decide to jointly undertake a Union dependency assessment. Market surveillance authorities should be able to request manufacturers of categories of products with digital elements established by ADCO to submit the software bills of materials (SBOMs) that they have generated pursuant to this Regulation. In order to protect the confidentiality of SBOMs, market surveillance authorities should submit relevant information about dependencies to ADCO in an anonymised and aggregated manner.
Recital 22 of 130
OFFICIAL TEXTRegulation (EU) 2024/2847·Official language version: English (EN)··Retrieved 2 November 2026·View on EUR-Lex
The 3 corrections published in the Official Journal for the English version are applied and marked in the text. This is not an official consolidated version: only the texts published in the Official Journal are authentic. Versions and sources
OFFICIAL TEXTVerbatim, as published. Not rewritten.
(22)