Cyber Resilience Act · CELEX 02024R2847-20241120

Article 41

Verbatim text of the current consolidated version (consolidated 2024-11-20) · status: in force. Check it on EUR-Lex ↗

Cyber Resilience Act, Article 41(1) — Subsidiaries of and subcontracting by notified bodies

Where a notified body subcontracts specific tasks connected with conformity assessment or has recourse to a subsidiary, it shall ensure that the subcontractor or the subsidiary meets the requirements set out in Article 39 and shall inform the notifying authority accordingly.

Cyber Resilience Act, Article 41(2) — Subsidiaries of and subcontracting by notified bodies

Notified bodies shall take full responsibility for the tasks performed by subcontractors or subsidiaries wherever they are established.

Cyber Resilience Act, Article 41(3) — Subsidiaries of and subcontracting by notified bodies

Activities may be subcontracted or carried out by a subsidiary only with the agreement of the manufacturer.

Cyber Resilience Act, Article 41(4) — Subsidiaries of and subcontracting by notified bodies

Notified bodies shall keep at the disposal of the notifying authority the relevant documents concerning the assessment of the qualifications of the subcontractor or the subsidiary and the work carried out by them under this Regulation.

This text is not written by an AI. It is rendered from a corpus built from the official EUR-Lex source, where every fragment is content-hashed and signed at ingestion — which is what lets you cite it and defend the citation. Ask a question about this article →

Article 41

Other articles of the Cyber Resilience Act