A software or hardware product and its remote data processing solutions, including software or hardware components being placed on the market separately
Defined in / by
Last updated: 22 August 2026.
Glossary termPublished inCRA
Product with digital elements
What does "Product with digital elements" mean under the Cyber Resilience Act?
Regulations
Cyber Resilience Act (CRA)
The Cyber Resilience Act is Regulation (EU) 2024/2847. Its reporting obligations under Article 14 apply from 11 September 2026, to every product with digital elements on the Union market, including products placed there before the Regulation's main obligations start on 11 December 2027. Actively exploited vulnerabilities must be reported within 24 hours.
NextArticle 14 reporting obligations apply: actively exploited vulnerabilities and severe incidentsChecked