CRA application timeline

Regulation (EU) 2024/2847 applies in phases. The dates below come from Article 71 (Entry into force and application).

• 2024-10-23 — Adoption by the European Parliament and the Council.
• 2024-11-20 — Publication in OJ L as Regulation (EU) 2024/2847.
• 2024-12-10 — Entry into force (twentieth day after OJ publication; Article 71(1)).
• 2026-06-11 — Chapter IV (Articles 35–51, notification of conformity assessment bodies) applies.
• 2026-09-11 — Article 14 reporting obligations apply (24h/72h/14d for actively exploited vulnerabilities; 24h/72h/1m for severe incidents).
• 2027-12-11 — Full application; CE marking, essential cybersecurity requirements (Annex I), penalties (Article 64).