Regulation (EU) 2024/2847 lays down cybersecurity rules for products with digital elements.
In particular, Annex III to that Regulation sets out the categories of important products with digital elements that are subject to stricter conformity assessment procedures when placed on the market than those applicable to other products with digital elements.
Annex IV to Regulation (EU) 2024/2847 sets out categories of critical products with digital elements for which manufacturers may be required to obtain a European cybersecurity certificate under a European cybersecurity certification scheme pursuant to Regulation (EU) 2019/881, or for which a third-party conformity assessment may be required before they are placed on the market.
Under Articles 7(1) and 8(1) of Regulation (EU) 2024/2847, the core functionality of a product with digital elements determines whether it meets the technical description of a category of important or critical products with digital elements and, consequently, which conformity assessment procedures apply.
The Implementing Regulation contains examples of products with digital elements whose core functionality meets the technical description of particular important or critical products with digital elements. The examples are illustrative only and do not constitute an exhaustive list.