Source: OJ L 2024/2847, 20.11.2024

Current language: SV

Artikel 46 Ifrågasättande av de anmälda organens kompetens


Summary What does Article 46 of the CRA regulation say?

This article establishes the Commission's investigative oversight role over notified bodies — the conformity assessment bodies designated under Article 43 to verify that products with digital elements meet the regulation's cybersecurity requirements.

It sets out what happens when questions arise about whether a notified body is still fit for purpose, giving the Commission the authority to investigate and, where necessary, compel corrective action by the relevant Member State.

Important points:

  • The Commission is required to investigate any case where doubt arises about a notified body's competence or continued fulfilment of its obligations.
  • Notifying Member States are required to provide the Commission with all relevant information on request during such an investigation.
  • Where the Commission finds a notified body no longer meets the requirements, it must inform the notifying Member State and request corrective measures, up to and including de-notification.

Springlex's summary of the article, a reading aid, not a substitute for the legal text.

    1. Kommissionen ska undersöka alla fall där den hyser tvivel, eller där den upplysts om sådana tvivel, om ett anmält organs kompetens eller ett anmält organs fortsatta uppfyllande av de krav och skyldigheter som det omfattas av.

    1. Den anmälande medlemsstaten ska på begäran ge kommissionen all information om grunderna för anmälan eller det berörda organets fortsatta kompetens.

    1. Kommissionen ska säkerställa att all känslig information som den erhåller under sina undersökningar behandlas konfidentiellt.

    1. Om kommissionen konstaterar att ett anmält organ inte uppfyller eller inte längre uppfyller kraven för anmälan ska den meddela detta till den anmälande medlemsstaten och anmoda medlemsstaten att vidta erforderliga korrigerande åtgärder, t.ex. vid behov återta anmälan.

We're continuously improving our platform to serve you better.

Your feedback matters! Let us know how we can improve.

Found a bug?

Springflod is a Swedish boutique consultancy firm specialising in cyber security within the financial services sector.

We offer professional services concerning information security governance, risk and compliance.

Crafted with ❤️ by Springflod