Cyber Resilience Act · CELEX 02024R2847-20241120

Article 36

Verbatim text of the current consolidated version (consolidated 2024-11-20) · status: in force. Check it on EUR-Lex ↗

Cyber Resilience Act, Article 36(1) — Notifying authorities

Each Member State shall designate a notifying authority that shall be responsible for setting up and carrying out the necessary procedures for the assessment, designation and notification of conformity assessment bodies and their monitoring, including compliance with Article 41.

Cyber Resilience Act, Article 36(2) — Notifying authorities

Member States may decide that the assessment and monitoring referred to in paragraph 1 shall be carried out by a national accreditation body within the meaning of and in accordance with Regulation (EC) No 765/2008.

Cyber Resilience Act, Article 36(3) — Notifying authorities

Where the notifying authority delegates or otherwise entrusts the assessment, notification or monitoring referred to in paragraph 1 of this Article to a body which is not a governmental entity, that body shall be a legal entity and shall comply mutatis mutandis with Article 37. In addition, it shall have arrangements in place to cover liabilities arising from its activities.

Cyber Resilience Act, Article 36(4) — Notifying authorities

The notifying authority shall take full responsibility for the tasks performed by the body referred to in paragraph 3.

This text is not written by an AI. It is rendered from a corpus built from the official EUR-Lex source, where every fragment is content-hashed and signed at ingestion — which is what lets you cite it and defend the citation. Ask a question about this article →

Article 36

Other articles of the Cyber Resilience Act