{
  "object_type": "agent_pack",
  "schema_version": 1,
  "id": "agent-pack:eu:cra",
  "act": "cra",
  "count": 6,
  "pack_hash": "63decf3672e0fd8182d7764e2f574822eae441864294339758502c29b26189bf",
  "usage": "Use each card directly in an answer: applies, risk, do, deadline, authority, source. Follow next_questions for the user's likely follow-up. Missing facts are not_in_register. Not legal advice.",
  "cards": [
    {
      "id": "card:eu:article:cra--art-13",
      "applies": [
        "manufacturer: Design, develop and produce products with digital elements in line with the essential cybersecurity requirements, carry out a cybersecurity risk assessment and handle vulnerabilities throughout a support period of at least five years."
      ],
      "risk": "high",
      "do": [
        "Design, develop and produce products with digital elements in line with the essential cybersecurity requirements, carry out a cybersecurity risk assessment and handle vulnerabilities throughout a support period of at least five years."
      ],
      "deadline": "not_in_register",
      "authority": "not_in_register",
      "source": "https://eur-lex.europa.eu/eli/reg/2024/2847/oj",
      "core_hash": "74e0affcaec540ba08422d00c1842d53e1c60983c5310f5f3b5107da0fc17007",
      "next": [
        "obligation:eu:cra-art-13-manufacturer",
        "sanction:eu:cra-art-64-2",
        "authority:eu:national-market-surveillance-authority",
        "card:eu:article:cra--art-14",
        "card:eu:article:cra--art-19"
      ],
      "next_questions": [
        {
          "q": "What does Article 14 CRA require?",
          "card": "card:eu:article:cra--art-14"
        },
        {
          "q": "What does Article 19 CRA require?",
          "card": "card:eu:article:cra--art-19"
        },
        {
          "q": "What does Article 20 CRA require?",
          "card": "card:eu:article:cra--art-20"
        },
        {
          "q": "What does Article 28 CRA require?",
          "card": "card:eu:article:cra--art-28"
        },
        {
          "q": "What does Article 31 CRA require?",
          "card": "card:eu:article:cra--art-31"
        }
      ],
      "attribution": "Source: NovaCopilot"
    },
    {
      "id": "card:eu:article:cra--art-14",
      "applies": [
        "manufacturer: Report actively exploited vulnerabilities and severe incidents to the coordinating CSIRT and ENISA via the single reporting platform: early warning, notification and final report."
      ],
      "risk": "high",
      "do": [
        "Report actively exploited vulnerabilities and severe incidents to the coordinating CSIRT and ENISA via the single reporting platform: early warning, notification and final report."
      ],
      "deadline": "Early warning within 24 hours, notification within 72 hours, final report within 14 days (vulnerability) or one month (incident)",
      "authority": "not_in_register",
      "source": "https://eur-lex.europa.eu/eli/reg/2024/2847/oj",
      "core_hash": "acdf4b2739689c99e2013e40fa26111ed8198516481206394465be5499bd5b1b",
      "next": [
        "obligation:eu:cra-art-14-manufacturer",
        "sanction:eu:cra-art-64-2",
        "authority:eu:national-market-surveillance-authority",
        "card:eu:article:cra--art-13",
        "card:eu:article:cra--art-19"
      ],
      "next_questions": [
        {
          "q": "What does Article 13 CRA require?",
          "card": "card:eu:article:cra--art-13"
        },
        {
          "q": "What does Article 19 CRA require?",
          "card": "card:eu:article:cra--art-19"
        },
        {
          "q": "What does Article 20 CRA require?",
          "card": "card:eu:article:cra--art-20"
        },
        {
          "q": "What does Article 28 CRA require?",
          "card": "card:eu:article:cra--art-28"
        },
        {
          "q": "What does Article 31 CRA require?",
          "card": "card:eu:article:cra--art-31"
        }
      ],
      "attribution": "Source: NovaCopilot"
    },
    {
      "id": "card:eu:article:cra--art-19",
      "applies": [
        "importer: Place on the market only products that comply with the essential requirements and verify conformity assessment, CE marking and documentation."
      ],
      "risk": "high",
      "do": [
        "Place on the market only products that comply with the essential requirements and verify conformity assessment, CE marking and documentation."
      ],
      "deadline": "not_in_register",
      "authority": "not_in_register",
      "source": "https://eur-lex.europa.eu/eli/reg/2024/2847/oj",
      "core_hash": "ca72b80a18f3a2fc6d9ccba61b440d49b93e10c1b6945c636f74dd0d086c01de",
      "next": [
        "obligation:eu:cra-art-19-importer",
        "sanction:eu:cra-art-64-3",
        "authority:eu:national-market-surveillance-authority",
        "card:eu:article:cra--art-13",
        "card:eu:article:cra--art-14"
      ],
      "next_questions": [
        {
          "q": "What does Article 13 CRA require?",
          "card": "card:eu:article:cra--art-13"
        },
        {
          "q": "What does Article 14 CRA require?",
          "card": "card:eu:article:cra--art-14"
        },
        {
          "q": "What does Article 20 CRA require?",
          "card": "card:eu:article:cra--art-20"
        },
        {
          "q": "What does Article 28 CRA require?",
          "card": "card:eu:article:cra--art-28"
        },
        {
          "q": "What does Article 31 CRA require?",
          "card": "card:eu:article:cra--art-31"
        }
      ],
      "attribution": "Source: NovaCopilot"
    },
    {
      "id": "card:eu:article:cra--art-20",
      "applies": [
        "distributor: Verify CE marking, EU declaration of conformity and manufacturer information before making a product available on the market."
      ],
      "risk": "high",
      "do": [
        "Verify CE marking, EU declaration of conformity and manufacturer information before making a product available on the market."
      ],
      "deadline": "not_in_register",
      "authority": "not_in_register",
      "source": "https://eur-lex.europa.eu/eli/reg/2024/2847/oj",
      "core_hash": "0f412eb7e1ec3002a36eb6639dc5174bb39f61a37e3a27b1ba8e1f3b6caf1079",
      "next": [
        "obligation:eu:cra-art-20-distributor",
        "sanction:eu:cra-art-64-3",
        "authority:eu:national-market-surveillance-authority",
        "card:eu:article:cra--art-13",
        "card:eu:article:cra--art-14"
      ],
      "next_questions": [
        {
          "q": "What does Article 13 CRA require?",
          "card": "card:eu:article:cra--art-13"
        },
        {
          "q": "What does Article 14 CRA require?",
          "card": "card:eu:article:cra--art-14"
        },
        {
          "q": "What does Article 19 CRA require?",
          "card": "card:eu:article:cra--art-19"
        },
        {
          "q": "What does Article 28 CRA require?",
          "card": "card:eu:article:cra--art-28"
        },
        {
          "q": "What does Article 31 CRA require?",
          "card": "card:eu:article:cra--art-31"
        }
      ],
      "attribution": "Source: NovaCopilot"
    },
    {
      "id": "card:eu:article:cra--art-28",
      "applies": [
        "manufacturer: Draw up the EU declaration of conformity stating that the essential cybersecurity requirements are met."
      ],
      "risk": "high",
      "do": [
        "Draw up the EU declaration of conformity stating that the essential cybersecurity requirements are met."
      ],
      "deadline": "not_in_register",
      "authority": "not_in_register",
      "source": "https://eur-lex.europa.eu/eli/reg/2024/2847/oj",
      "core_hash": "9391ff698b499c8b35874650d9bd91c6448eae00c9c57cff40b7e48ea1a86697",
      "next": [
        "obligation:eu:cra-art-28-manufacturer",
        "sanction:eu:cra-art-64-3",
        "authority:eu:national-market-surveillance-authority",
        "card:eu:article:cra--art-13",
        "card:eu:article:cra--art-14"
      ],
      "next_questions": [
        {
          "q": "What does Article 13 CRA require?",
          "card": "card:eu:article:cra--art-13"
        },
        {
          "q": "What does Article 14 CRA require?",
          "card": "card:eu:article:cra--art-14"
        },
        {
          "q": "What does Article 19 CRA require?",
          "card": "card:eu:article:cra--art-19"
        },
        {
          "q": "What does Article 20 CRA require?",
          "card": "card:eu:article:cra--art-20"
        },
        {
          "q": "What does Article 31 CRA require?",
          "card": "card:eu:article:cra--art-31"
        }
      ],
      "attribution": "Source: NovaCopilot"
    },
    {
      "id": "card:eu:article:cra--art-31",
      "applies": [
        "manufacturer: Draw up technical documentation before placing the product on the market and keep it up to date during the support period."
      ],
      "risk": "high",
      "do": [
        "Draw up technical documentation before placing the product on the market and keep it up to date during the support period."
      ],
      "deadline": "not_in_register",
      "authority": "not_in_register",
      "source": "https://eur-lex.europa.eu/eli/reg/2024/2847/oj",
      "core_hash": "eba87a3a498f41f0e7505c2eaca2765536eea7c855ac48382f4847e645730037",
      "next": [
        "obligation:eu:cra-art-31-manufacturer",
        "sanction:eu:cra-art-64-3",
        "authority:eu:national-market-surveillance-authority",
        "card:eu:article:cra--art-13",
        "card:eu:article:cra--art-14"
      ],
      "next_questions": [
        {
          "q": "What does Article 13 CRA require?",
          "card": "card:eu:article:cra--art-13"
        },
        {
          "q": "What does Article 14 CRA require?",
          "card": "card:eu:article:cra--art-14"
        },
        {
          "q": "What does Article 19 CRA require?",
          "card": "card:eu:article:cra--art-19"
        },
        {
          "q": "What does Article 20 CRA require?",
          "card": "card:eu:article:cra--art-20"
        },
        {
          "q": "What does Article 28 CRA require?",
          "card": "card:eu:article:cra--art-28"
        }
      ],
      "attribution": "Source: NovaCopilot"
    }
  ],
  "index": "/api/public/v1/agent-pack",
  "concept": "/api/public/v1/agent",
  "attribution": "Source: NovaCopilot",
  "access_class": "decision",
  "access_view": "public"
}