EU – Commission Implementing Regulation (EU) 2025/2392 on the Technical Description of the Categories of Important and Critical Products with Digital Elements

The Commission Implementing Regulation (EU) 2025/2392, adopted on November 28, 2025, provides the technical descriptions of important and critical products with digital elements as outlined in Annexes III and IV of the Cyber Resilience Act (Regulation (EU) 2024/2847). It specifies that the core functionality of a product determines whether it falls under the categories of important or critical products, which are subject to stricter cybersecurity conformity assessments or mandatory third-party certification. Manufacturers must ensure that their products meet essential cybersecurity requirements, conduct risk assessments, and demonstrate compliance with the relevant conformity assessment procedures, considering the product’s intended use and lifespan.​

Artículo de publicado en https://www.tuv.com/regulations-and-standards/en/eu-commission-implementing-regulation-eu-2025-2392-on-the-technical-description-of-the-categories-of-important-and-critical-products-with-digital-elements.html