EU - Commission Implementing Regulation (EU) 2025/2392 on the Technical Description of the Categories of Important and Critical Products with Digital Elements
Business description
The Commission Implementing Regulation (EU) 2025/2392, adopted on November 28, 2025, provides the technical descriptions of important and critical products with digital elements as outlined in Annexes III and IV of the Cyber Resilience Act (Regulation (EU) 2024/2847).
It specifies that the core functionality of a product determines whether it falls under the categories of important or critical products, which are subject to stricter cybersecurity conformity assessments or mandatory third-party certification.
Manufacturers must ensure that their products meet essential cybersecurity requirements, conduct risk assessments, and demonstrate compliance with the relevant conformity assessment procedures, considering the product's intended use and lifespan.
Disclaimer
The content of our website has been compiled with meticulous care and to the best of our knowledge. However, we cannot assume liability on the page content to be up-to-date, complete or accurate.