Cyber Resilience Act · CELEX 02024R2847-20241120

Article 37

Verbatim text of the current consolidated version (consolidated 2024-11-20) · status: in force. Check it on EUR-Lex ↗

Cyber Resilience Act, Article 37(1) — Requirements relating to notifying authorities

A notifying authority shall be established in such a way that no conflict of interest with conformity assessment bodies occurs.

Cyber Resilience Act, Article 37(2) — Requirements relating to notifying authorities

A notifying authority shall be organised and shall function so as to safeguard the objectivity and impartiality of its activities.

Cyber Resilience Act, Article 37(3) — Requirements relating to notifying authorities

A notifying authority shall be organised in such a way that each decision relating to notification of a conformity assessment body is taken by competent persons different from those who carried out the assessment.

Cyber Resilience Act, Article 37(4) — Requirements relating to notifying authorities

A notifying authority shall not offer or provide any activities that conformity assessment bodies perform or consultancy services on commercial or competitive basis.

Cyber Resilience Act, Article 37(5) — Requirements relating to notifying authorities

A notifying authority shall safeguard the confidentiality of the information it obtains.

Cyber Resilience Act, Article 37(6) — Requirements relating to notifying authorities

A notifying authority shall have a sufficient number of competent personnel at its disposal for the proper performance of its tasks.

This text is not written by an AI. It is rendered from a corpus built from the official EUR-Lex source, where every fragment is content-hashed and signed at ingestion — which is what lets you cite it and defend the citation. Ask a question about this article →

Article 37

Other articles of the Cyber Resilience Act