{"object_type":"card","schema_version":1,"id":"card:eu:article:cra--art-14","core":{"id":"card:eu:article:cra--art-14","subject":"eu:cra--art-14","act":"cra","article":"14","rule":[{"role":"manufacturer","duty":"Report actively exploited vulnerabilities and severe incidents to the coordinating CSIRT and ENISA via the single reporting platform: early warning, notification and final report."}],"authority":"not_in_register","timeline":{"in_force":"2024-12-10","applies":"2027-12-11","deadlines":[{"obligation":"obligation:eu:cra-art-14-manufacturer","hours":24,"days":null,"note":"Early warning within 24 hours, notification within 72 hours, final report within 14 days (vulnerability) or one month (incident)"}]},"provenance":{"source":"Regulation (EU) 2024/2847 (Cyber Resilience Act)","source_url":"https://eur-lex.europa.eu/eli/reg/2024/2847/oj","eur_lex":"https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32024R2847","read_at":"2026-08-31"}},"core_hash":"acdf4b2739689c99e2013e40fa26111ed8198516481206394465be5499bd5b1b","extended":{"outcome":"not_in_register","action_kit":[{"step":1,"role":"manufacturer","do":"Report actively exploited vulnerabilities and severe incidents to the coordinating CSIRT and ENISA via the single reporting platform: early warning, notification and final report."}],"timeline_dated":[],"affected_parties":[{"role":"manufacturer"}],"documentation_requirements":[{"kind":"report","role":"manufacturer","provision":"cra 14","retention":null,"obligation":"obligation:eu:cra-art-14-manufacturer"}],"risk_if_ignored":{"level":"high","sanctions":[{"id":"sanction:eu:cra-art-64-2","type":"administrative_fine","authority":"National market surveillance authority","max_amount":"EUR 15 000 000","max_turnover_pct":2.5}]},"related_rules":["card:eu:article:cra--art-13","card:eu:article:cra--art-19","card:eu:article:cra--art-20","card:eu:article:cra--art-28","card:eu:article:cra--art-31"],"related_cases":"not_in_register","precedent":"not_in_register","comparison_objects":"not_in_register","change_history":[{"day":"2026-08-31","type":"rechecked","event":"Raden läst mot EUR-Lex utan ändring","hash_after":"6ec17107ff61028d"},{"day":"2024-12-10","type":"added","event":"Rättsakten trädde i kraft enligt CELEX 32024R2847","hash_after":"6ec17107ff61028d"}]},"links":[{"id":"obligation:eu:cra-art-14-manufacturer","type":"obligation","url":"https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu:cra-art-14-manufacturer"},{"id":"sanction:eu:cra-art-64-2","type":"sanction","url":"https://legal.exploreworldai.com/api/public/v1/obj/sanction/eu:cra-art-64-2"},{"id":"authority:eu:national-market-surveillance-authority","type":"authority","url":"https://legal.exploreworldai.com/api/public/v1/obj/authority/eu:national-market-surveillance-authority"},{"id":"card:eu:article:cra--art-13","type":"card","url":"https://legal.exploreworldai.com/api/public/v1/card?id=card:eu:article:cra--art-13"},{"id":"card:eu:article:cra--art-19","type":"card","url":"https://legal.exploreworldai.com/api/public/v1/card?id=card:eu:article:cra--art-19"},{"id":"card:eu:article:cra--art-20","type":"card","url":"https://legal.exploreworldai.com/api/public/v1/card?id=card:eu:article:cra--art-20"},{"id":"card:eu:article:cra--art-28","type":"card","url":"https://legal.exploreworldai.com/api/public/v1/card?id=card:eu:article:cra--art-28"},{"id":"card:eu:article:cra--art-31","type":"card","url":"https://legal.exploreworldai.com/api/public/v1/card?id=card:eu:article:cra--art-31"},{"id":"timeline:eu:cra","type":"timeline","url":"https://legal.exploreworldai.com/api/public/v1/obj/timeline/eu:cra"},{"id":"page:/eu/rattsakter/cyberresiliens-2024-2847/artikel-14","type":"page","url":"https://legal.exploreworldai.com/eu/rattsakter/cyberresiliens-2024-2847/artikel-14"}],"link_count":{"total":10,"public":10,"meets_target":true},"next_questions":{"items":[{"question":"What does Article 13 CRA require?","card":"card:eu:article:cra--art-13","type":"article","url":"https://legal.exploreworldai.com/api/public/v1/card?id=card:eu:article:cra--art-13&view=compact"},{"question":"What does Article 19 CRA require?","card":"card:eu:article:cra--art-19","type":"article","url":"https://legal.exploreworldai.com/api/public/v1/card?id=card:eu:article:cra--art-19&view=compact"},{"question":"What does Article 20 CRA require?","card":"card:eu:article:cra--art-20","type":"article","url":"https://legal.exploreworldai.com/api/public/v1/card?id=card:eu:article:cra--art-20&view=compact"},{"question":"What does Article 28 CRA require?","card":"card:eu:article:cra--art-28","type":"article","url":"https://legal.exploreworldai.com/api/public/v1/card?id=card:eu:article:cra--art-28&view=compact"},{"question":"What does Article 31 CRA require?","card":"card:eu:article:cra--art-31","type":"article","url":"https://legal.exploreworldai.com/api/public/v1/card?id=card:eu:article:cra--art-31&view=compact"}],"count":5,"meets_target":true},"method":"Composed with fixed rules from the obligation, sanction, action kit, timeline, documentation, outcome, judgment reference, national implementation and change journal registers. Missing fields are not_in_register.","attribution":"Source: NovaCopilot","withheld":{"links_full":10},"access":{"status":"partner_key_required","header":"x-partner-key","contact":"https://legal.exploreworldai.com/kontakt","note":"Facts and counts are public. Relationships and decision paths stay inside NovaCopilot."},"access_class":"decision","access_view":"public","freshness":{"freshness_class":"live","as_of":"2026-11-03T10:19:47.367Z","valid_for":3600,"recheck":"https://legal.exploreworldai.com/api/public/v1/card?id=card%3Aeu%3Aarticle%3Acra--art-14","note":"Kontrollera mot recheck efter valid_for sekunder. If-None-Match ger 304 när inget ändrats.","tokens":1741}}