Scope and classification
Check whether the EU Cyber Resilience Act applies to a product and which class it falls in: default, important Class I or II, or critical.
Article 14 reporting obligations have applied since 11 September 2026. Next: Full application, 11 Dec 2027.
Full timelineCheck whether the EU Cyber Resilience Act applies to a product and which class it falls in: default, important Class I or II, or critical.