🛡️ 2.5 General Product Safety Regulation (EU) 2023/988

General product safety regulation compliance

2.5.1 What is the interplay between the CRA and the General Product Safety Regulation?

The CRA and the General Product Safety Regulation (GPSR) both provide for rules for the making available on the market of products, but they have a different scope in terms of the products and aspects that they apply to and the requirements that they set. In terms of products in scope of the Regulations, while the CRA only applies to products with digital elements, the GPSR applies to all consumer products to the extent that there are no specific provisions with the same objective under Union law that regulate the safety of the products concerned. In terms of the requirements set by the Regulations, the CRA provides for cybersecurity requirements, while the GPSR provides safety requirements for products.

© 2025 European Union • CC-BY 4.0 • “FAQs on the Cyber Resilience Act” p.18 (PDF) •
Disclaimer

Disclaimer: This document is prepared by the Commission services and should not be considered as representative of the European Commission’s official position. The replies to the FAQs do not extend in any way the rights and obligations deriving from applicable legislation nor introduce any additional requirement. The expressed views are not authoritative and cannot prejudge any future actions the European Commission may take, including potential positions before the Court of Justice of the European Union, which is competent to authoritatively interpret Union law.

Go to page
2.5.2 Does a product with digital elements need to comply with the requirements of both the CRA and the GPSR?

A product with digital elements may need to comply with both the requirements of the CRA and the GPSR. When a product with digital elements also poses other risks beyond cybersecurity risks that are covered by the CRA, those other risks may be regulated by other EU legislation such as the GPSR. As long as there is no product-specific regulation that regulates those other risks of the product with digital elements in question, the GPSR applies to the safety aspects of those risks (Article 11 CRA).

© 2025 European Union • CC-BY 4.0 • “FAQs on the Cyber Resilience Act” p.18 (PDF) •
Disclaimer

Disclaimer: This document is prepared by the Commission services and should not be considered as representative of the European Commission’s official position. The replies to the FAQs do not extend in any way the rights and obligations deriving from applicable legislation nor introduce any additional requirement. The expressed views are not authoritative and cannot prejudge any future actions the European Commission may take, including potential positions before the Court of Justice of the European Union, which is competent to authoritatively interpret Union law.

Go to page