Article 44 — Identification numbers and lists of notified bodies

Cyber Resilience Act (CRA) · Chapter IV

The Commission shall assign an identification number to a notified body.

It shall assign a single such number even where the body is notified under several Union legal acts.

The Commission shall make publicly available the list of the bodies notified under this Regulation, including the identification numbers that have been allocated to them and the activities for which they have been notified.

The Commission shall ensure that that list is kept up to date.

In practiceMeroi Security’s note, not part of the regulation

The identification number does not appear on every product. The Blue Guide explains that the number follows the CE marking only where the notified body was involved in the production phase, so a body acting in the design phase under module B leaves no number on the product. Where several notified bodies are involved in the production phase, several identification numbers follow the marking. A CE marking carrying no number therefore means that no notified body intervened in design or production under module A, or that an in-house accredited body intervened in production under modules A1 or A2, or that a notified body intervened in the design phase under module B while none intervened in production. That reading of the marking comes from the Blue Guide and is not mandated by the CRA.

Source: Blue Guide 2022 (2022/C 247/01) §4.5.1.5, horizontal product-law guidance that predates the CRA

General information. This does not constitute legal advice.