CRA
Navigation log
Table of Contents
Chapter I – General provisions
Chapter II – Obligations of economic operators and provisions in relation to free and open-source software
Chapter III – Conformity of the product with digital elements
Chapter IV – Notification of conformity assessment bodies
Chapter V – Market surveillance and enforcement
Chapter VI – Delegated powers and committee procedure
Chapter VII – Confidentiality and penalties
Chapter VIII – Transitional and final provisions
Recitals (130)
Annexes
Article 22
Other cases in which obligations of manufacturers apply
1. A natural or legal person, other than the manufacturer, the importer or the distributor, that carries out a substantial modification of a product with digital elements and makes that product available on the market, shall be considered to be a manufacturer for the purposes of this Regulation.
2. The person referred to in paragraph 1 of this Article shall be subject to the obligations set out in Articles 13 and 14 for the part of the product with digital elements that is affected by the substantial modification or, if the substantial modification has an impact on the cybersecurity of the product with digital elements as a whole, for the entire product.
Related insights
- EU Cyber Resilience Act Compliance Timeline & FAQPillar15 Sept 2026