> For the complete documentation index, see [llms.txt](https://www.mica.wtf/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://www.mica.wtf/cra/chapter-v-market-surveillance-and-enforcement-art.-52-60/57.md). # Art. 57 — Compliant products with digital elements which present a significant cybersecurity risk CRA Article 57 — Compliant products with digital elements which present a significant cybersecurity risk. Regulation (EU) 2024/2847, Chapter V — Market surveillance and enforcement. 1. The [market surveillance authority](https://headlesslaw.com/definitions/cra/market-surveillance-authority/) of a Member State shall require an [economic operator](https://headlesslaw.com/definitions/cra/economic-operator/) to take all appropriate measures where, having performed an evaluation under [Article 54](/cra/chapter-v-market-surveillance-and-enforcement-art.-52-60/54.md), it finds that although a [product with digital elements](https://headlesslaw.com/definitions/cra/product-with-digital-elements/) and the processes put in place by the [manufacturer](https://headlesslaw.com/definitions/cra/manufacturer/) are in compliance with this Regulation, they present a [significant cybersecurity risk](https://headlesslaw.com/definitions/cra/significant-cybersecurity-risk/) as well as a risk to: 1. the health or safety of persons; 2. the compliance with obligations under Union or national law intended to protect fundamental rights; 3. the availability, authenticity, integrity or confidentiality of services offered using an [electronic information system](https://headlesslaw.com/definitions/cra/electronic-information-system/) by essential entities as referred to in Article 3(1) of Directive (EU) 2022/2555; or 4. other aspects of public interest protection. The measures referred to in the first subparagraph may include measures to ensure that the product with digital elements concerned and the processes put in place by the manufacturer no longer present the relevant risks when made available on the market, [withdrawal](https://headlesslaw.com/definitions/cra/withdrawal/) from the market of the product with digital elements concerned, or recalling of it, and shall be commensurate with the nature of those risks. 2. The manufacturer or other relevant economic operators shall ensure that corrective action is taken in respect of the products with digital elements concerned that they have made available on the market throughout the Union within the timeline established by the market surveillance authority of the Member State referred to in paragraph 1. 3. The Member State shall immediately inform the Commission and the other Member States about the measures taken pursuant to paragraph 1. That information shall include all available details, in particular the data necessary for the identification of the products with digital elements concerned, the origin and the supply chain of those products with digital elements, the nature of the risk involved and the nature and duration of the national measures taken. 4. The Commission shall without delay enter into consultation with the Member States and the relevant economic operator and shall evaluate the national measures taken. On the basis of the results of that evaluation, the Commission shall decide whether the measure is justified or not and, where necessary, propose appropriate measures. 5. The Commission shall address the decision referred to in paragraph 4 to the Member States. 6. Where the Commission has sufficient reason to consider, including based on information provided by ENISA, that a product with digital elements, although compliant with this Regulation, presents the risks referred to in paragraph 1 of this Article, it shall inform and may request the relevant market surveillance authority or authorities to carry out an evaluation and follow the procedures referred to in [Article 54](/cra/chapter-v-market-surveillance-and-enforcement-art.-52-60/54.md) and in paragraphs 1, 2 and 3 of this Article. 7. In circumstances which justify an immediate intervention to preserve the proper functioning of the internal market and where the Commission has sufficient reason to consider that the product with digital elements referred to in paragraph 6 continues to present the risks referred to in paragraph 1, and no effective measures have been taken by the relevant national market surveillance authorities, the Commission shall carry out an evaluation of the risks presented by that product with digital elements and may request ENISA to provide an analysis to support that evaluation and shall inform the relevant market surveillance authorities accordingly. The relevant economic operators shall cooperate with ENISA as necessary. 8. Based on the evaluation referred to in paragraph 7, the Commission may establish that a corrective or restrictive measure is necessary at Union level. To that end, it shall without delay consult the Member States concerned and the relevant economic operator or operators. 9. On the basis of the consultation referred to in paragraph 8 of this Article, the Commission may adopt implementing acts to decide on corrective or restrictive measures at Union level, including requiring the products with digital elements concerned to be withdrawn from the market, or recalled, within a reasonable period, commensurate with the nature of the risk. Those implementing acts shall be adopted in accordance with the examination procedure referred to in [Article 62(2)](/cra/chapter-vi-delegated-powers-and-committee-procedure-art.-61-62/62.md). 10. The Commission shall immediately communicate the implementing acts referred to in paragraph 9 to the relevant economic operator or operators. Member States shall implement those implementing acts without delay and shall inform the Commission accordingly. 11. Paragraphs 6 to 10 shall apply for the duration of the exceptional situation that justified the Commission’s intervention and for as long as the product with digital elements concerned continues to present the risks referred to in paragraph 1. --- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter: ``` GET https://www.mica.wtf/cra/chapter-v-market-surveillance-and-enforcement-art.-52-60/57.md?ask=&goal= ``` `ask` is the immediate question: it should be specific, self-contained, and written in natural language. `goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.