CRA market surveillance: the ANFR perspective

For manufacturers of connected radio products, the authority that matters for both the RED directive and the CRA is ANFR, not DGCCRF. Both regulations are enforced by the same small team of inspectors, operating with a resource constraint that shapes enforcement into a model of exemplary cases. Article 14 creates an investigation channel that did not exist before: a manufacturer who notifies a vulnerability becomes visible to ANFR; one who does not, becomes exposed when the flaw becomes public. What ANFR looks for in a CRA technical file, what triggers a control, and why the CRA sanction regime changes the risk calculus for investors.