OFFICIAL TEXTRegulation (EU) 2024/2847·Official language version: English (EN)··Retrieved 2 November 2026·View on EUR-Lex
You are reading a consolidation made by regulation-cra.eu: the Official Journal text with its corrigenda and the amendments made by Regulation (EU) 2025/327 to Articles 13(4), 31(3) and 32(5a), which apply from 26 March 2027 (date to be verified). It is not an official consolidated version: only the texts published in the Official Journal are authentic. Versions and sources
OFFICIAL TEXTVerbatim, as published. Not rewritten.
(75)
Member States should aim to address, to the extent possible, the challenges faced by vulnerability researchers, including their potential exposure to criminal liability, in accordance with national law. Given that natural and legal persons researching vulnerabilities could in some Member States be exposed to criminal and civil liability, Member States are encouraged to adopt guidelines as regards the non-prosecution of information security researchers and an exemption from civil liability for their activities.
regulation-cra.eu/regulation/recitals/75 · Regulation (EU) 2024/2847 · EN · OJ L, 2024/2847, 20.11.2024 · retrieved 2026-11-02 · Only the Official Journal text is authentic.
Audience measurement
We would like to count visits on our own server (pseudonymous identifier, pages viewed, downloads) to learn which content is useful. No advertising, no third-party tracker. Your choice does not change access to the content. Privacy policy