The Council of the European Union published a corrigendum to the Cyber Resilience Act (CRA) on 2 June 2026, correcting minor linguistic errors in the Slovak language version of the regulation. The corrections address procedural details for how designated Computer Security Incident Response Teams (CSIRTs) coordinate vulnerability notifications among manufacturers. The changes are technical and do not alter the substance of the adopted regulation.
The Cyber Resilience Act, adopted in 2024, establishes horizontal cybersecurity requirements for products with digital elements to ensure a common level of security across the internal market. The regulation imposes obligations on manufacturers, importers, and distributors regarding cybersecurity risk management, vulnerability handling, and incident reporting. The corrigendum ensures consistency across all official EU language versions.
Technical corrections only
The corrigendum rectifies linguistic inaccuracies in the Slovak text, specifically in provisions detailing the coordination process for vulnerability notifications. No substantive changes were made to the regulatory framework or obligations for stakeholders.
Impact on stakeholders
The corrigendum has negligible impact on EU producers, national authorities, or consumers, as it only harmonizes the Slovak language version with the original text. Manufacturers and CSIRTs operating in Slovakia will benefit from clearer procedural language, but the underlying requirements remain unchanged.
Institutional follow-up
No further action is required from other EU institutions. The corrigendum is effective upon publication in the Official Journal of the European Union.