As a manufacturer, if I make a mistake or a security flaw is found in my project, will I get in trouble?
- If you fail to comply with the CRA, you will likely receive a letter or email from Market Surveillance Authorities asking you to address the issue.
- If you continue to fail to address the issue as a manufacturer, you could receive a fine. The fine will be proportional to the size of your organisation and how severely you broke the law.
- Microenterprises or small enterprises are exempted from fines relating to the obligation to notify authorities about vulnerabilities and severe incidents within 24 hours.
© 2025
ORC WG Authors
• CC BY 4.0
• Source
•
Disclaimer
Disclaimer: The information contained in this FAQ is of a general nature only and is not intended to address the specific circumstances of any particular individual or entity. It is not necessarily comprehensive, complete, accurate, or up to date. It does not constitute professional or legal advice. If you need specific advice, you should consult a suitably qualified professional.