emendrixAccount

Provision history · Cyber Resilience Act

Art. 64 · Penalties

Cyber Resilience Act · 32024R2847 · every version of this act · on EUR-Lex (external, EUR-Lex)

1 change recorded across 1 version, newest first.

Follow this provision (Atom) · Watch it from CI · Watch this provision

Version detected , Modified +1 −1

no amending act named

Applies from: no date changed

Explanation, written by a model and checked against the cited text

The range of paragraphs from which the derogation in paragraph 10 departs was changed from paragraphs 3 to 9 to paragraphs 2 to 9, so paragraph 2 is now included in that range.

Cited: Art. 64, v1 (external, EUR-Lex) · Art. 64, v2 (external, EUR-Lex)

v1 is the previous version, v2 this one.

Text from EUR-Lex, before and after

Previous version 32024R2847 → this version, detected 29 August 2026 02024R2847-20241120

Article 64 Penalties 1. Member States shall lay down the rules on penalties applicable to infringements of this Regulation and shall take all measures necessary to ensure that they are implemented. The penalties provided for shall be effective, proportionate and dissuasive. Member … 427 unchanged words … equivalent effect. 9. Administrative fines may be imposed, depending on the circumstances of each individual case, in addition to any other corrective or restrictive measures applied by the market surveillance authorities for the same infringement. 10. By way of derogation from paragraphs 3 2 to 9, the administrative fines referred to in those paragraphs shall not apply to the following: (a) manufacturers that qualify as microenterprises or small enterprises with regard to any failure to meet the deadline referred to in Article 14(2), point (a), or Article 14(4), point (a); (b) any infringement of this Regulation by open-source software stewards.