Versions, corrigenda and sources
Which text you are reading
| Version on this site | What it is | Authentic? |
|---|---|---|
| Default view | OJ L, 2024/2847, 20.11.2024, with the 3 corrections published in the Official Journal for the English version applied by regulation-cra.eu. Each change is marked in the text. | No — a reading aid. Only the Official Journal texts are authentic. |
| As originally published | OJ L, 2024/2847, 20.11.2024, exactly as published, without corrigenda. | Yes — reproduces the Official Journal publication. |
| Consolidated (from 26 March 2027) | The default view plus the amendments made by Article 104 of Regulation (EU) 2025/327 (Articles 13(4) and 31(3) replaced, Article 32(5a) inserted), merged by regulation-cra.eu with the wording of the amending act. These amendments apply from 26 March 2027 (date to be verified). | No — an unofficial consolidation, provided in advance. Only the Official Journal texts are authentic. |
No official consolidated version incorporating later changes was available from the Publications Office when this text was retrieved (2 November 2026).
Corrigenda applied to the English text
| Published | Provision | Correction | Source |
|---|---|---|---|
| 5 December 2024 | Title | On page 1, in the title: | 32024R2847R(01) |
| 2 July 2025 | Article 64 | Page 65, Article 64(10), introductory wording: | 32024R2847R(02) |
| 17 October 2025 | Article 67 | On page 66, in Article 67: | 32024R2847R(04) |
Other corrigenda concern only other language versions and do not change the English text: 32024R2847R(02), 32024R2847R(03), 32024R2847R(04), 32024R2847R(06), 32024R2847R(07).
Published for language versions that this site does not reproduce; they do not change the English, French, German or Dutch text. 32024R2847R(05) (SLK, 23 February 2026) · 32024R2847R(08) (SLV, 9 October 2026)
Amendment by Regulation (EU) 2025/327 on the European Health Data Space
Article 104 of Regulation (EU) 2025/327 (OJ L, 2025/327, 5.3.2025) amends the Cyber Resilience Act. On this site the changes are shown next to the provisions concerned and are not merged into the text.
- Point (1): in Article 13, paragraph 4 is replaced by the following: Article 13
- Point (2): in Article 31, paragraph 3 is replaced by the following: Article 31
- Point (3): in Article 32, the following paragraph is inserted: Article 32
Entry into force of the amending act: 25 March 2025. Application of these amendments: 26 March 2027 TO VERIFY — Regulation (EU) 2025/327, Article 105: entry into force on the twentieth day following publication; 'This Regulation shall apply from 26 March 2027', Article 104 not being listed among the exceptions.
Acts adopted under the Regulation
Delegated and implementing acts of the Commission adopted on the basis of Regulation (EU) 2024/2847, as listed by the Publications Office (checked 2 November 2026, then weekly). Their text is not reproduced on this site: follow the links to EUR-Lex.
- Commission Delegated Regulation (EU) 2025/1535 of 29 July 2025 supplementing Regulation (EU) 2024/2847 of the European Parliament and of the Council with regard to an exclusion from the application of that Regulation for certain products with digital elements falling within the scope of Regulation (EU) No 168/2013 of the European Parliament and of the Council — Provisions concerned: Article 2(5)
- Commission Implementing Regulation (EU) 2025/2392 of 28 November 2025 on the technical description of the categories of important and critical products with digital elements pursuant to Regulation (EU) 2024/2847 of the European Parliament and of the Council — Provisions concerned: Article 7(4), Annex III, Annex IV
- Commission Delegated Regulation (EU) 2026/881 of 11 December 2025 supplementing Regulation (EU) 2024/2847 of the European Parliament and of the Council by specifying the terms and conditions for applying the cybersecurity-related grounds in relation to delaying the dissemination of notifications — Provisions concerned: Article 14(9), Article 16(2)
Key dates
- 20 November 2024 — Regulation (EU) 2024/2847 published in the Official Journal (in application)
- 10 December 2024 — Entry into force (in application)
- 11 June 2026 — Chapter IV applies: notification of conformity assessment bodies (Articles 35 to 51) (in application)
- 11 September 2026 — Article 14 applies: manufacturers' reporting obligations (actively exploited vulnerabilities and severe incidents) (in application)
- 26 March 2027 — Amendments made by Regulation (EU) 2025/327 (European Health Data Space) apply: Article 13(4) and Article 31(3) replaced, Article 32(5a) inserted (upcoming, to verify)
- 11 December 2027 — General application of the Regulation (upcoming)
Source and checks
- Imported from the official Formex 4 (XML) publication of the Publications Office of the European Union (CELLAR), retrieved 2 November 2026. SHA-256 of the archive: 93a1084b14383c0828b060ca933e9e83f9e8477fb2f9fbf81ee47750565f3155.
- Content: 6 citations, 130 recitals, 8 chapters, 71 articles, 288 numbered paragraphs, 8 annexes, 43 notes.
- Checks passed at import: every element converted, full text completeness, independent comparison of every citation, recital, article and annex with the official XHTML publication, continuous numbering, identical structure in the English, French, German and Dutch versions.
- Official text reproduced from EUR-Lex (© European Union, reuse authorised under Commission Decision 2011/833/EU). Only the versions published in the Official Journal of the European Union are authentic. Regulation (EU) 2024/2847 on EUR-Lex