Skip to content
Ordinary legislative procedure First reading

Horizontal cybersecurity requirements for products with digital elements and amending Regulation (EU) 2019/1020

A proposed EU law. Parliament and the Council must agree on the same text: Parliament adopts its position, then negotiates with the Council.

Where it stands: Completed: published in the Official Journal on 20 November 2024 and now EU law.

  1. ✓ Referred to committee 9 November 2022
  2. ✓ Committee work Report adopted 19 July 2023
  3. ✓ Tabled for plenary 27 July 2023
  4. ✓ Negotiations with the Council Deal approved in committee 23 January 2024
  5. ✓ Plenary vote Adopted 12 March 2024
  6. ✓ Published as law 20 November 2024
How a file moves through Parliament

A file is referred to one lead committee (others may give an opinion). Its rapporteur writes a draft report, committee members table amendments, and the committee votes to adopt the report. The report is then tabled for all MEPs; political groups can table further amendments, which are voted on before the final vote in plenary. For a law, Parliament’s adopted text is its first-reading position; Parliament and the Council then negotiate a common text (trilogues) which both must approve before it is published as law.

Who is working on it

Lead committee
ITRE — Industry, Research and Energy
Rapporteur
MEP #124821 Renew
Shadow rapporteurs
MEP #239255 MEP #240478 MEP #124726 PPEMEP #96713 ECRMEP #124856 Verts/ALEMarc BOTENGA The Left

The rapporteur drafts and negotiates the text for the lead committee; each other political group names a shadow rapporteur to follow the file.

The text, version by version

Adopted by Parliament · latest Adopted text TA9-0130/2024 12 March 2024 ✦ Parliament adopted its first-reading position on the proposed Cyber Resilience Act, which sets horizontal cybersecurity requirements for products with digital elements and amends Regulation (EU) 2019/1020 and other acts.⇄ what changed Tabled for plenary Report A9-0253/2023 27 July 2023 ✦ Parliament's amended version of the Commission proposal for a Cyber Resilience Act sets horizontal cybersecurity requirements for products with digital elements placed on the EU market.⇄ what changed Committee draft Draft report (ITRE) 31 March 2023 ✦ The rapporteur's draft report sets out Parliament's position on the proposed regulation on horizontal cybersecurity requirements for products with digital elements, amending Regulation (EU) 2019/1020.

Committee opinions: Opinion (IMCO),Draft opinion (IMCO)

Newest version first. Open a version to read it in full. “What changed” shows the differences paragraph by paragraph; ✦ lines are AI-written from the texts themselves.

Timeline

  1. Outcome
  2. 20 November 2024 Published in the Official Journal

    The act is now EU law.

  3. 23 October 2024 Signed by the Presidents of Parliament and the Council

    The last step before the act is published in the Official Journal.

  4. Plenary stage
  5. 12 March 2024 Plenary vote
    Sitting of 12 March 2024 📄 Adopted text TA9-0130/2024📄 Report A9-0253/2023
    Adopted Adopted by an overwhelming majority
    For 517 Against 12 Abstained 78

    Final vote on the provisional agreement at 13:33 · 85% of votes cast in favour · every MEP’s position →

    How the vote unfolded · 2 ballots

    adopted rejected lapsed square = amendment circle = part of the text decisive vote Solid = roll call (click for every MEP’s vote); faded = no individual positions

    Show all 2 ballots in voting order
    1. Final vote on the provisional agreement 13:33 A9-0253/2023 – Nicola Danti – Provisional agreement – Am 2
    Adopted
    2. Joint statement
    — no individual positions recorded
    Adopted
  6. 11 March 2024 Debated in plenary

    MEPs debated the text in the chamber ahead of the vote.

    Sitting of 11 March 2024 📄 Council / Commission text C9-0308/2022📄 Report A9-0253/2023
  7. Negotiations with the Council
  8. 23 January 2024 Committee approved the deal reached with the Council

    The provisional agreement from the trilogues goes to the whole Parliament for a vote.

    📄 ITRE-AG-758004
  9. 13 September 2023 Plenary endorsed the mandate to negotiate with the Council

    Parliament’s negotiators can now seek a compromise text with the Council (in “trilogues”).

  10. Plenary stage
  11. 27 July 2023 Report tabled for plenary

    This is the text all MEPs vote on. Political groups can still table amendments to it.

    📄 Report A9-0253/2023
  12. Committee stage
  13. 19 July 2023 Committee vote: report adopted

    ITRE (Industry, Research and Energy) voted on the amendments and adopted the report that goes to plenary.

  14. 29 June 2023 IMCO (Internal Market and Consumer Protection) adopted its opinion

    The opinion is attached to the report for the lead committee to consider.

    📄 Opinion (IMCO)
  15. 31 March 2023 Draft report published

    The rapporteur’s first text in ITRE (Industry, Research and Energy). Members can table amendments before the committee votes.

    📄 Draft report (ITRE)
  16. 31 March 2023 Draft opinion from IMCO (Internal Market and Consumer Protection)

    An associated committee gives its view to the lead committee.

    📄 Draft opinion (IMCO)
  17. 9 November 2022 Referred to the ITRE (Industry, Research and Energy) committee

    The lead committee prepares Parliament’s report.