Cyber Resilience Act · CELEX 02024R2847-20241120

Article 22

Verbatim text of the current consolidated version (consolidated 2024-11-20) · status: in force. Check it on EUR-Lex ↗

Cyber Resilience Act, Article 22(1) — Other cases in which obligations of manufacturers apply

A natural or legal person, other than the manufacturer, the importer or the distributor, that carries out a substantial modification of a product with digital elements and makes that product available on the market, shall be considered to be a manufacturer for the purposes of this Regulation.

Cyber Resilience Act, Article 22(2) — Other cases in which obligations of manufacturers apply

The person referred to in paragraph 1 of this Article shall be subject to the obligations set out in Articles 13 and 14 for the part of the product with digital elements that is affected by the substantial modification or, if the substantial modification has an impact on the cybersecurity of the product with digital elements as a whole, for the entire product.

This text is not written by an AI. It is rendered from a corpus built from the official EUR-Lex source, where every fragment is content-hashed and signed at ingestion — which is what lets you cite it and defend the citation. Ask a question about this article →

Article 22

Other articles of the Cyber Resilience Act