Skip to main content
Oficiálna stránka verejnej správy SR
Cyber Resilience Act · National Security Authority

Measures, decisions and penalties

Last updated:

This page explains measures and decisions taken by a market-surveillance authority and possible penalties. An economic operator’s own workflow for addressing non-compliance is covered by Correct product non-compliance.

From a finding to a measure

An inspection finding does not automatically mean a fine. Depending on the nature of the non-compliance or cybersecurity risk, it may be necessary to bring the product into conformity, restrict or prohibit further making available, withdraw it from the distribution chain, or recall it from users.

The scope, deadline and evidence of completion are governed by the legal basis and the specific official communication or decision. The economic operator should retain evidence that the measure was completed across affected versions and relevant markets.

Authority decisions

A formal decision identifies its addressee, subject and legal basis, the duty or measure imposed, the deadline and how it must be fulfilled. Follow the delivered decision and check its remedy instructions and the current legal position.

To choose and carry out corrective action, use the correction workflow. To challenge a decision or raise a concern about authority procedure, see Appeals and complaints.

Objection to a measure

An economic operator that disagrees with a measure may submit a reasoned written objection within five working days after the measure is delivered. The objection does not have suspensive effect, so the measure must be implemented within its stated scope and deadline unless the competent authority decides otherwise. The person who imposed the measure may amend or revoke it within ten working days after receiving the objection. If the objection is not granted, that person refers it to the Director of the Office within the same period; the Director decides within ten working days after referral. The Director’s decision is final.

When submitting an objection, check the instructions in the delivered measure and the current text of the applicable law, particularly the submission method, deadline and required particulars.

Penalties

The CRA requires penalties to be effective, proportionate and dissuasive. Article 64 provides different maximum administrative fines for different types of infringement and lists factors to be considered. The specific procedure and authority to impose penalties in Slovakia also depend on the applicable national framework.

This page does not calculate a possible fine or publish unverified Slovak penalty levels. For a specific case, follow applicable law and the decision delivered to you. A penalty does not replace a duty to correct, restrict, withdraw or recall a product where such action is necessary.

Legal basis: Regulation (EU) 2024/2847, particularly Articles 52–58 and 64, and Regulation (EU) 2019/1020.