Thomas Cutuil TC
  • Blog
  • CV
  • Consulting
The RED cyber DA is repealed: the CRA takes over on 11 December 2027 Featured
CRA Conformité CE Cybersécurité Directive RED EN 18031

The RED cyber DA is repealed: the CRA takes over on 11 December 2027

Commission Delegated Regulation (EU) 2026/339, published in the Official Journal on 29 April 2026, repeals Delegated Regulation (EU) 2022/30 with effect 11 December 2027 — the date of full CRA application. There will be no regulatory double-obligation: radio equipment manufacturers who have been working toward EN 18031 compliance since August 2025 are covered until that date, and the CRA takes over exclusively. What the repeal resolves, what it does not, and how to sequence the transition.

 1 May 2026  6 min
CRA market surveillance: the ANFR perspective Featured
ANFR Article 14 CRA Conformité CE Contrôle de marché Due diligence

CRA market surveillance: the ANFR perspective

For manufacturers of connected radio products, the authority that matters for both the RED directive and the CRA is ANFR, not DGCCRF. Both regulations are enforced by the same small team of inspectors, operating with a resource constraint that shapes enforcement into a model of exemplary cases. Article 14 creates an investigation channel that did not exist before: a manufacturer who notifies a vulnerability becomes visible to ANFR; one who does not, becomes exposed when the flaw becomes public. What ANFR looks for in a CRA technical file, what triggers a control, and why the CRA sanction regime changes the risk calculus for investors.

 30 April 2026  12 min
DGCCRF and CE marking compliance: the inspector's method
Conformité CE DGCCRF Directive Machines Dossier technique Surveillance du marché

DGCCRF and CE marking compliance: the inspector's method

A DGCCRF inspection does not begin with the technical file: it begins with the visible elements of the product on the shelf. The funnel method, the company maturity assessment, the test report reading grid and the administrative follow-up sequence constitute a framework that a manufacturer cannot reconstruct from the regulatory text. This article describes that framework from statutory authorisation to compelled publication, covering the CE regulations in DGCCRF's mandate: LVD, EMC, Machinery Directive and Regulation 2023/1230, Toys, PPE, CPR, ATEX, RoHS, WEEE and GPSR.

 2 May 2026  12 min
All ANFR Annexe III Article 14 CRA CVD Conformité Conformité CE Contrôle de marché Cybersécurité DDADUE DGCCRF Directive Machines Directive RED Dossier technique Due diligence EN 18031 EN 304 632 Firmware Gestion des vulnérabilités Marquage CE PSIRT SBOM Surveillance du marché
Thomas Cutuil

Certification engineer — EU product compliance expert

Navigation

  • Home
  • CV
  • Consulting
  • Blog

Language

© 2026 Thomas Cutuil