Source: OJ L 2024/2847, 20.11.2024

Current language: FR

Article 45 Modifications apportées à la notification


Summary What does Article 45 of the CRA regulation say?

This article deals with the consequences of a notified body falling short of its obligations — essentially, it is the enforcement mechanism that sits alongside the designation process established in Article 43.

Where a notifying authority becomes aware that a notified body no longer meets the required standards or is failing in its duties, it must take action by restricting, suspending, or withdrawing that body's notification, with the severity of the response calibrated to the seriousness of the failure.

The article also addresses the practical matter of what happens to the body's files and ongoing work if it loses its status or ceases operating entirely.

Important points:

  • Notifying authorities are required to restrict, suspend, or withdraw a notified body's notification if it no longer meets the requirements of Article 39 or fails to fulfil its obligations, and must immediately inform the Commission and other Member States.
  • The Commission and all Member States must be informed immediately when such action is taken.
  • The notifying Member State must ensure that any files held by a restricted, suspended, withdrawn, or inactive notified body are either transferred to another notified body or kept available for the relevant authorities upon request.

Springlex's summary of the article, a reading aid, not a substitute for the legal text.

    1. Lorsqu’une autorité notifiante a établi ou a été informée qu’un organisme notifié ne répond plus aux exigences prévues à l’article 39, ou qu’il ne s’acquitte pas de ses obligations, elle soumet la notification à des restrictions, la suspend ou la retire, selon le cas, en fonction de la gravité du non-respect de ces exigences ou du non-acquittement de ces obligations. Elle en informe immédiatement la Commission et les autres États membres.

    1. En cas de restriction, de suspension ou de retrait d’une notification, ou lorsque l’organisme notifié a cessé ses activités, l’État membre notifiant prend les mesures qui s’imposent pour faire en sorte que les dossiers dudit organisme soient traités par un autre organisme notifié ou tenus à la disposition des autorités notifiantes et des autorités de surveillance du marché compétentes qui en font la demande.

We're continuously improving our platform to serve you better.

Your feedback matters! Let us know how we can improve.

Found a bug?

Springflod is a Swedish boutique consultancy firm specialising in cyber security within the financial services sector.

We offer professional services concerning information security governance, risk and compliance.

Crafted with ❤️ by Springflod