COMMISSION DELEGATED REGULATION (EU) …/... supplementing Regulation (EU) 2024/2847 of the European Parliament and of the Council with regard to an exclusion from the application of that Regulation ...

Ref. Ares(2025)3617816 - 05/05/2025 EUROPEAN COMMISSION Brussels, XXX […](2025) XXX draft COMMISSION DELEGATED REGULATION (EU) …/... of XXX supplementing Regulation (EU) 2024/2847 of the European Parliament and of the Council with regard to an exclusion from the application of that Regulation for certain products with digital elements falling within the scope of Regulation 168/2013 of the European Parliament and of the Council This draft has not been adopted or endorsed by the European Commission. Any views expressed are the preliminary views of the Commission services and may not in any circumstances be regarded as stating an official position of the Commission. EXPLANATORY MEMORANDUM 1. CONTEXT OF THE DELEGATED ACT Regulation (EU) 2024/2847 of the European Parliament and of the Council1 (the ‘Cyber Resilience Act’) empowers the Commission to limit or exclude the application of the Cyber Resilience Act to products with digital elements that are covered by other Union rules laying down requirements that address all or some of the risks covered by the essential cybersecurity requirements of the Cyber Resilience Act. UN regulation No 155 on Cyber Security and Cyber Security Management System2 introduces cybersecurity requirements for wheeled vehicles and its application is made mandatory under Regulation (EU) 2019/2143. For this reason, products with digital elements to which Regulation (EU) 2019/2144 applies were excluded from the scope...