Recital 27 Exemptions for vehicles

Regulation (EU) 2019/2144 of the European Parliament and of the Council(¹¹)Regulation (EU) 2019/2144 of the European Parliament and of the Council of 27 November 2019 on type-approval requirements for motor vehicles and their trailers, and systems, components and separate technical units intended for such vehicles, as regards their general safety and the protection of vehicle occupants and vulnerable road users, amending Regulation (EU) 2018/858 of the European Parliament and of the Council and repealing Regulations (EC) No 78/2009, (EC) No 79/2009 and (EC) No 661/2009 of the European Parliament and of the Council and Commission Regulations (EC) No 631/2009, (EU) No 406/2010, (EU) No 672/2010, (EU) No 1003/2010, (EU) No 1005/2010, (EU) No 1008/2010, (EU) No 1009/2010, (EU) No 19/2011, (EU) No 109/2011, (EU) No 458/2011, (EU) No 65/2012, (EU) No 130/2012, (EU) No 347/2012, (EU) No 351/2012, (EU) No 1230/2012 and (EU) 2015/166 (OJ L 325, 16.12.2019, p. 1). establishes requirements for the type-approval of vehicles, and of their systems and components means software or hardware intended for integration into an electronic information system;, introducing certain cybersecurity means cybersecurity as defined in Article 2, point (1), of Regulation (EU) 2019/881; requirements, including on the operation of a certified cybersecurity means cybersecurity as defined in Article 2, point (1), of Regulation (EU) 2019/881; management system, on software means the part of an electronic information system which consists of computer code; updates, covering organisations’ policies and processes for cybersecurity risks means the potential for loss or disruption caused by an incident and is to be expressed as a combination of the magnitude of such loss or disruption and the likelihood of occurrence of the incident; related to the entire lifecycle of vehicles, equipment and services in compliance with the applicable United Nations regulations on technical specifications means a technical specification as defined in Article 2, point (4), of Regulation (EU) No 1025/2012; and cybersecurity means cybersecurity as defined in Article 2, point (1), of Regulation (EU) 2019/881;, in particular UN Regulation No 155 – Uniform provisions concerning the approval of vehicles with regards to cybersecurity means cybersecurity as defined in Article 2, point (1), of Regulation (EU) 2019/881; and cybersecurity means cybersecurity as defined in Article 2, point (1), of Regulation (EU) 2019/881; management system(¹²)OJ L 82, 9.3.2021, p. 30. and providing for specific conformity assessment means the process of verifying whether the essential cybersecurity requirements set out in Annex I have been fulfilled; procedures. In the area of aviation, the principal objective of Regulation (EU) 2018/1139 of the European Parliament and of the Council(¹³)Regulation (EU) 2018/1139 of the European Parliament and of the Council of 4 July 2018 on common rules in the field of civil aviation and establishing a European Union Aviation Safety Agency, and amending Regulations (EC) No 2111/2005, (EC) No 1008/2008, (EU) No 996/2010, (EU) No 376/2014 and Directives 2014/30/EU and 2014/53/EU of the European Parliament and of the Council, and repealing Regulations (EC) No 552/2004 and (EC) No 216/2008 of the European Parliament and of the Council and Council Regulation (EEC) No 3922/91 (OJ L 212, 22.8.2018, p. 1). is to establish and maintain a high uniform level of civil aviation safety in the Union. It creates a framework for essential requirements for airworthiness for aeronautical products, parts and equipment, including software means the part of an electronic information system which consists of computer code;, that includes obligations to protect against information security threats. The certification process under Regulation (EU) 2018/1139 ensures the level of assurance aimed for by this Regulation. Products with digital elements means a software or hardware product and its remote data processing solutions, including software or hardware components being placed on the market separately; to which Regulation (EU) 2019/2144 applies and products certified in accordance with Regulation (EU) 2018/1139 should not therefore be subject to the essential cybersecurity means cybersecurity as defined in Article 2, point (1), of Regulation (EU) 2019/881; requirements and conformity assessment means the process of verifying whether the essential cybersecurity requirements set out in Annex I have been fulfilled; procedures set out in this Regulation.