Cyber Resilience Act
Horizontal cybersecurity requirements for products with digital elements and amending Regulation (EU) 2019/1020
- Stage
- In force, reached 20 Nov 2024
- In force
- In force since 10 Dec 2024 · CELEX 32024R2847
- Procedure
- Ordinary legislative procedure
- Rapporteur
- Nicola Danti (Renew)
- Lead DG
- DG CNECT
- Commissioner
- Thierry Breton
- Last activity
- 20 Nov 2024
Where it stands
Latest: Published in the Official Journal, 20 Nov 2024.
ShowHide the earlier record: 16 dates, 25 May 2022 to 13 Sept 2023
- 25 May 2022
- Call for evidence closed: Cyber Resilience Act, 108 responses · Commission
- Public consultation closed: Cyber Resilience Act, 167 responses · Commission
- 15 Sept 2022
- Adoption of legislative proposal by the Commission
- 16 Sept 2022
- Discussions within the Council or its preparatory bodies
- 9 Nov 2022
- Referred to committee
- 16 Nov 2022
- Discussions within the Council or its preparatory bodies
- 16 Dec 2022
- Discussions within the Council or its preparatory bodies
- 21 Dec 2022
- Discussions within the Council or its preparatory bodies
- 23 Jan 2023
- Feedback on adopted proposal closed: Cyber Resilience Act, 131 responses · Commission
- 31 Mar 2023
- Committee opinion tabled
- Committee report tabled
- EP committee draft report
- 31 May 2023
- Discussions within the Council or its preparatory bodies
- 29 Jun 2023
- Committee opinion adopted
- 19 Jul 2023
- Adoption of negotiating mandate by Coreper
- Committee report adopted
- 27 Jul 2023
- Tabled for plenary
- 31 Aug 2023
- Discussions within the Council or its preparatory bodies
- 11 Sept 2023
- Plenary sitting
- 13 Sept 2023
- Plenary endorsed the trilogue mandate
- 20 Dec 2023
- Discussions within the Council or its preparatory bodies
- Endorsement of the provisional agreement by Coreper
- 23 Jan 2024
- Committee approved the provisional agreement
- 11 Mar 2024
- Debate in plenary
- 12 Mar 2024
- EP position at first reading
- Plenary amended the proposal
- Plenary vote
- 18 Jun 2024
- Discussions within the Council or its preparatory bodies
- 10 Oct 2024
- Approval of the EP's first reading position by the Council (adoption of the legislative act)
- 23 Oct 2024
- Signed
- 20 Nov 2024
- Published in the Official Journal
Who is on it
The Parliament's rapporteurs, shadow rapporteurs and opinion rapporteurs currently on this file.
| Role | Name | Group | Country | Committee |
|---|---|---|---|---|
| Rapporteur | Nicola Danti | Renew | IT | ITRE |
| Shadow rapporteur | Beatrice Covassi | IT | ITRE | |
| Shadow rapporteur | Evžen Tošenovský | ECR | CZ | ITRE |
| Shadow rapporteur | Henna Virkkunen | EPP | FI | ITRE |
| Shadow rapporteur | Ignazio Corrao | Greens/EFA | IT | ITRE |
| Shadow rapporteur | Marc Botenga | The Left | BE | ITRE |
| Shadow rapporteur | Matteo Gazzini | IT | ITRE | |
| Rapporteur for opinion | Morten Løkkegaard | Renew | DK | IMCO |
Amendments
Tabled on 5 Mar 2024. The texts are in the amendment documents below.
By article
- –1
Delegated and implementing acts beneath it
By status: 3 published.
| Act | Kind | Status | Adoption |
|---|---|---|---|
| Commission Delegated Regulation (EU) 2026/881 | Delegated · Regulation | Published | Q4 2025 |
| Commission Implementing Regulation (EU) 2025/2392 | Implementing · Regulation | Published | Q3 2025 |
| Commission Delegated Regulation (EU) 2025/1535 | Delegated · Regulation | Published | Q3 2025 |
Titles link to EUR-Lex where the act has been published.
Documents
Newest first. Each opens at its source.
- Report · A9-0253/2023Parliament
- Proposal · COM(2022)0454Parliament
- Text adopted · Corrigendum to final act 32024R2847R(01)Commission
- Text adopted · Corrigendum to final act 32024R2847R(02)Commission
- Text adopted · Corrigendum to final act 32024R2847R(04)Commission
- OJ C 452 29.11.2022, p. 0023Commission
- Text adopted · OJ L 02.07.2025Commission
- Text adopted · OJ L 05.12.2024Commission
- Text adopted · OJ L 17.10.2025Commission
- Text adopted · OJ L 20.11.2024Commission
- Committee opinion · PE742.490Parliament
- Report · PE745.538Parliament
- Amendments · PE746.920Parliament
- Amendments · PE746.921Parliament
- Agenda · PE758.004Parliament
- Text adopted · Regulation 2024/2847Commission
- Text adopted · SP(2024)350Parliament
- Text adopted · T9-0130/2024Parliament
Consultations on it
The Commission's Have Your Say consultations linked to this file. Where we publish the positions filed, the title opens them here.
| Consultation | Feedback deadline | Feedback received |
|---|---|---|
| 23 Jan 2023 | 406 |
Summary
GeneratedThe Cyber Resilience Act imposes mandatory cybersecurity requirements for the design, development, and maintenance of products with digital elements placed on the EU market. It affects manufacturers and developers of hardware and software, from consumer IoT devices to industrial components. The regulation was signed in October 2024 and entered into force on 20 November 2024.
What the workspace adds on this file
Everything above is the public record. Subscribers see this page with their own layer on top.
Why it matters to you
What moved
Your contacts on it
A first draft
Sources: EP Legislative Observatory · EUR-Lex. Record as of 14 Sept 2026. Something wrong on this page? Report an error.
Request access
See this file with your own layer on top: why it matters to you, your contacts on it and a first draft. We’ll schedule a 20-minute walkthrough.
EU-hosted · GDPR-compliant · Trust Center →
By submitting, you agree to our privacy policy.