SOURCE-ANCHORED READINESS
CYBER RESILIENCE ACT · ARTICLE 14

CRA reporting obligation: what changes on 11 September 2026?

The CRA generally applies from December 2027, but Article 14 reporting obligations apply earlier: from 11 September 2026.

Start free checkFree check · €99 Action Pack

What to check

  • Manufacturers need a process to assess actively exploited vulnerabilities and severe security incidents.
  • Article 14 includes early-warning and follow-up reporting stages with short time windows.
  • COMPLYKIT tests workflow readiness; it does not file reports with authorities.

Product truth

COMPLYKIT is a readiness and orientation tool. Results are not legal advice, a binding applicability determination, certification or a compliance guarantee. COMPLYKIT does not claim automatic authority filing, automatic company/document analysis or real-time regulatory monitoring.

Privacy · Legal Notice · Product Truth