Source: OJ L 2024/2847, 20.11.2024Current language: EN
- Cyber resilience for products with digital elements
Basic legislative acts
- CRA regulation
Article 59 Joint activities of market surveillance authorities
Market surveillance authoritiesmeans a market surveillance authority as defined in Article 3, point (4), of Regulation (EU) 2019/1020; may agree with other relevant authorities to carry out joint activities aimed at ensuring cybersecuritymeans cybersecurity as defined in Article 2, point (1), of Regulation (EU) 2019/881; and the protection of consumersmeans a natural person who acts for purposes which are outside that person’s trade, business, craft or profession; with respect to specific products with digital elementsmeans a software or hardware product and its remote data processing solutions, including software or hardware components being placed on the market separately; placed on the market or made available on the market, in particular products with digital elementsmeans a software or hardware product and its remote data processing solutions, including software or hardware components being placed on the market separately; that are often found to present cybersecurity risksmeans the potential for loss or disruption caused by an incident and is to be expressed as a combination of the magnitude of such loss or disruption and the likelihood of occurrence of the incident;.
The Commission or ENISA shall propose joint activities for checking compliance with this Regulation to be conducted by market surveillance authoritiesmeans a market surveillance authority as defined in Article 3, point (4), of Regulation (EU) 2019/1020; based on indications or information of potential non-compliance across several Member States of products with digital elementsmeans a software or hardware product and its remote data processing solutions, including software or hardware components being placed on the market separately; that fall within the scope of this Regulation with the requirements laid down in this Regulation.
The market surveillance authoritiesmeans a market surveillance authority as defined in Article 3, point (4), of Regulation (EU) 2019/1020; and, where applicable, the Commission, shall ensure that the agreement to carry out joint activities does not lead to unfair competition between economic operatorsmeans the manufacturer, the authorised representative, the importer, the distributor, or other natural or legal person who is subject to obligations in relation to the manufacture of products with digital elements or to the making available of products with digital elements on the market in accordance with this Regulation; and does not negatively affect the objectivity, independence and impartiality of the parties to the agreement.
A market surveillance authoritymeans a market surveillance authority as defined in Article 3, point (4), of Regulation (EU) 2019/1020; may use any information obtained as a result of the joint activities carried out as part of any investigation that it undertakes.
The market surveillance authoritymeans a market surveillance authority as defined in Article 3, point (4), of Regulation (EU) 2019/1020; concerned and, where applicable, the Commission, shall make the agreement on joint activities, including the names of the parties involved, available to the public.
Relevant recitals
Recital 109 Cooperation of market surveillance authorities
Market surveillance authoritiesmeans a market surveillance authority as defined in Article 3, point (4), of Regulation (EU) 2019/1020;, through ADCO established under this Regulation, should cooperate closely and should be able to develop guidance documents to facilitate market surveillance activities at national level, such as by developing best practices and indicators to effectively check the compliance of products with digital elementsmeans a software or hardware product and its remote data processing solutions, including software or hardware components being placed on the market separately; with this Regulation.
Recital 113 Joint activities of market surveillance authorities
Where there are indications of non-compliance with this Regulation in several Member States, market surveillance authoritiesmeans a market surveillance authority as defined in Article 3, point (4), of Regulation (EU) 2019/1020; should be able to carry out joint activities with other authorities, with a view to verifying compliance and identifying cybersecurity risksmeans the potential for loss or disruption caused by an incident and is to be expressed as a combination of the magnitude of such loss or disruption and the likelihood of occurrence of the incident; of products with digital elementsmeans a software or hardware product and its remote data processing solutions, including software or hardware components being placed on the market separately;.
Recital 115 Role of ENISA
In light of its expertise and mandate, ENISA should be able to support the process for implementation of this Regulation. In particular, ENISA should be able to propose joint activities to be conducted by market surveillance authoritiesmeans a market surveillance authority as defined in Article 3, point (4), of Regulation (EU) 2019/1020; based on indications or information regarding potential non-compliance with this Regulation of products with digital elementsmeans a software or hardware product and its remote data processing solutions, including software or hardware components being placed on the market separately; across several Member States or identify categories of products for which sweeps should be organised. In exceptional circumstances, ENISA should be able, at the request of the Commission, to conduct evaluations in respect of specific products with digital elementsmeans a software or hardware product and its remote data processing solutions, including software or hardware components being placed on the market separately; that present a significant cybersecurity riskmeans a cybersecurity risk which, based on its technical characteristics, can be assumed to have a high likelihood of an incident that could lead to a severe negative impact, including by causing considerable material or non-material loss or disruption;, where an immediate intervention is required to preserve the proper functioning of the internal market.
Springlex and this text is meant purely as a documentation tool and has no legal effect. No liability is assumed for its content. The authentic version of this act is the one published in the Official Journal of the European Union.