DDADUE Article 32: ANFR to be designated as France's CRA authority Featured
ANFR CRA Conformité Contrôle de marché DDADUE

DDADUE Article 32: ANFR to be designated as France's CRA authority

The DDADUE bill, adopted by the Senate under accelerated procedure, formally designates ANFR as France's market surveillance authority for the CRA. Article 32 inserts a new I quinquies into Article L.43 of the CPCE, sets out the mise en demeure → fine sequence, and codifies the three CRA sanction tiers (up to €15M or 2.5% of worldwide turnover). Two points deserve particular attention: trade secrets are not opposable to ANFR in CRA investigations, and the entry into force is split, ANFR mission on 11 September 2026, sanctions regime on 11 December 2027.

 1 May 2026  6 min
CRA market surveillance: the ANFR perspective Featured
ANFR Article 14 CRA Conformité CE Contrôle de marché Due diligence

CRA market surveillance: the ANFR perspective

For manufacturers of connected radio products, the authority that matters for both the RED directive and the CRA is ANFR, not DGCCRF. Both regulations are enforced by the same small team of inspectors, operating with a resource constraint that shapes enforcement into a model of exemplary cases. Article 14 creates an investigation channel that did not exist before: a manufacturer who notifies a vulnerability becomes visible to ANFR; one who does not, becomes exposed when the flaw becomes public. What ANFR looks for in a CRA technical file, what triggers a control, and why the CRA sanction regime changes the risk calculus for investors.

 30 April 2026  12 min
All ANFR Annexe III Article 14 CRA CVD Conformité Conformité CE Contrôle de marché Cybersécurité DDADUE DGCCRF Directive Machines Directive RED Dossier technique Due diligence EN 18031 EN 304 632 Firmware Gestion des vulnérabilités Marquage CE PSIRT SBOM Surveillance du marché