Start with the European Commission’s official guidance when you need to interpret the CRA’s scope or turn its requirements into practical compliance steps.
Current Commission material
- Commission guidance C(2026) 5252 and its annex (27 July 2026) – practical explanations of scope, substantial modification, support periods, reporting and cybersecurity risk assessment.
- Commission FAQs on CRA implementation – a regularly updated companion to the guidance.
- CRA implementation overview – dates, related acts and updates.
How to use these documents
- First confirm whether your product and role are within the CRA’s scope.
- For each decision, record the specific question, example or section of the guidance you relied on.
- Check the document date and whether the Commission has issued a newer version.
- If guidance conflicts with a binding legal act, the legal act prevails.
Legal status: the guidance and FAQs help interpretation but are not legally binding. The basis remains Regulation (EU) 2024/2847 and any applicable delegated or implementing acts.
Reviewed 4 September 2026.