In view of the public cybersecurity objectives of this Regulation and in order to improve the situational awareness of Member States as regards the Union’s dependency on software components and in particular on potentially free and open-source software components, a dedicated administrative cooperation group (ADCO) established by this Regulation should be able to decide to jointly undertake a Union dependency assessment. Market surveillance authorities should be able to request manufacturers of categories of products with digital elements established by ADCO to submit the software bills of materials (SBOMs) that they have generated pursuant to this Regulation. In order to protect the confidentiality of SBOMs, market surveillance authorities should submit relevant information about dependencies to ADCO in an anonymised and aggregated manner.
Recital 22 of 130
OFFICIAL TEXTRegulation (EU) 2024/2847·Official language version: English (EN)··Retrieved 2 November 2026·View on EUR-Lex
You are reading a consolidation made by regulation-cra.eu: the Official Journal text with its corrigenda and the amendments made by Regulation (EU) 2025/327 to Articles 13(4), 31(3) and 32(5a), which apply from 26 March 2027 (date to be verified). It is not an official consolidated version: only the texts published in the Official Journal are authentic. Versions and sources
OFFICIAL TEXTVerbatim, as published. Not rewritten.
(22)