This delegated regulation outlines an exclusion from the application of the CRA for products with digital elements covered by Regulation (EU) No 168/2013 on the type-approval of two- or three-wheel vehicles and quadricycles. The exclusion is based on the updated scope of UN Regulation No 155 on vehicle cybersecurity, which now includes L-category vehicles. To avoid overlapping cybersecurity requirements, these vehicles are exempt from the Cyber Resilience Act, except for L1e category cycles designed to pedal, which remain within its scope.
Author: European Commission
Status: Adopted / Published
Adoption date: 2025-07-29
Last updated: 16 Aug 2025
Category: Relevant legislation
Subcategory: Delegated Regulation