Commission Implementing Regulation (EU) 2025/2392 of 28 November 2025 on the technical description of the categories of important and critical products with digital elements pursuant to Regulation (EU) 2024/2847

as it stood on 2025-11-28, permalink: /eu-eurlex/32025r2392/2025-11-28--61b6cbc98e65f764166710db26c6a831a1fd0ecab07a18187731fb2aced2bb50

Official publisher wording state selected for 2025-11-28. This is the consolidated version dated 2025-11-28. Its interval on Lex's publisher-version axis is publisher version 2025-11-28 → latest held; that is not a claim about entry into force or application.

Text included, per-article reading view. Deterministic extraction of the verbatim retrieved document; each displayed provision carries its own hash and anchor. © European Union, 1998-2026. Reuse permitted with attribution under Commission Decision 2011/833/EU. Consolidated texts have no legal effect; only acts published in the Official Journal are authentic.

Outline, 3 provisions

art_1 art_2 art_3

art_1 #art_1

Article 1

For the purposes of this Regulation, the following definitions shall apply:

(1)	‘Common Criteria’ means the Common Criteria for Information Technology Security Evaluation as defined in Article 2(1) of Implementing Regulation (EU) 2024/482 or as set out in the standards referred to in Article 3(2), points (a) and (b), of that Implementing Regulation;

(2)	‘Common Evaluation Methodology’ means the Common Methodology for Information Technology Security Evaluation as defined in Article 2(2) of Implementing Regulation (EU) 2024/482 or as set out in the standards referred to in Article 3(2), points (c) and (d), of that Implementing Regulation.

art_2 #art_2

Article 2

The technical description of the categories of products with digital elements under classes I and II listed in Annex III to Regulation (EU) 2024/2847 shall be as set out in Annex I to this Regulation.
The technical description of the categories of products with digital elements listed in Annex IV to Regulation (EU) 2024/2847 shall be as set out in the Annex II to this Regulation.

art_3 #art_3

Article 3

This Regulation shall enter into force on the twentieth day following that of its publication in the Official Journal of the European Union.

Provenance and validity dates, identifier, hash

as of	2025-11-28 → this publisher state was selected
publisher state	publisher version 2025-11-28 → latest held publisher-asserted
type	REG_IMPL Commission Implementing Regulation (EU) 2025/2392 of 28 November 2025 on the technical description of the categories of important and critical products with digital elements pursuant to Regulation (EU) 2024/2847 of the European Parliament and of the Council
language	en
published	2025-11-28
lex_id	eu-eurlex:32025r2392:2025-11-28--61b6cbc98e65f764166710db26c6a831a1fd0ecab07a18187731fb2aced2bb50
record sha256	ed4fb1838f0b0beb418b6455009f98ac9487a95114530bbcc89d35ed1b341138

New here? What am I looking at?

This is an official consolidated text: the original act with later amendments merged by EUR-Lex for the date shown above.

The consolidation date is not an entry-into-force or application date. It identifies a publisher wording state. The authentic legal acts remain those published in the Official Journal; Lex preserves the consolidated wording, source and hashes as a reading and comparison aid.

Each displayed provision carries its own hash so you can verify that Lex served the indexed text unchanged, here is how.

timeline

tier	A, publisher-supplied consolidated wording-state dates
history begins	publisher
index built	2026-08-15T09:01:06Z · corpus e9c4df0981c855855a1a28218cf086ddeb5bb691
stamp signature	valid (ECDSA-P256)