OFFICIAL TEXTRegulation (EU) 2024/2847·Official language version: English (EN)··Retrieved 2 November 2026·View on EUR-Lex
You are reading a consolidation made by regulation-cra.eu: the Official Journal text with its corrigenda and the amendments made by Regulation (EU) 2025/327 to Articles 13(4), 31(3) and 32(5a), which apply from 26 March 2027 (date to be verified). It is not an official consolidated version: only the texts published in the Official Journal are authentic. Versions and sources
OFFICIAL TEXTVerbatim, as published. Not rewritten.
(64)
Manufacturers should make their products with digital elements available on the market with a secure by default configuration and provide security updates to users free of charge. Manufacturers should only be able to deviate from the essential cybersecurity requirements in relation to tailor-made products that are fitted to a particular purpose for a particular business user and where both the manufacturer and the user have explicitly agreed to a different set of contractual terms.
regulation-cra.eu/regulation/recitals/64 · Regulation (EU) 2024/2847 · EN · OJ L, 2024/2847, 20.11.2024 · retrieved 2026-11-02 · Only the Official Journal text is authentic.
Audience measurement
We would like to count visits on our own server (pseudonymous identifier, pages viewed, downloads) to learn which content is useful. No advertising, no third-party tracker. Your choice does not change access to the content. Privacy policy