STANDARDS DRIFT

The record

The EU harmonised standards record, September 2026

Days since the CRA entered into force
652
Harmonised standards cited for the CRA
0
Of the standards formally requested
0 of 41

Cyber Resilience Act, Regulation (EU) 2024/2847

Cited in the Official Journal: 0 of 41 requested, checked against the Commission's harmonised standards index, which carries no entry for the CRA. The Commission publishes no delivery counter for the request.

The standardisation request is C(2025)618 of 3 February 2025, 41 standards. Its annex sets deadlines for adoption by the European standardisation organisations: items 1 and 15 by 30 August 2026, passed 24 days ago undelivered; items 16 to 41 by 30 October 2026, in 37 days; items 2 to 14 by 30 October 2027. A draft amendment circulated in July 2026 has not been adopted, so these dates stand. Incident reporting under Article 14 applies from 11 September 2026, 12 days ago; full application 11 December 2027.

On 13 August 2026 ETSI opened public enquiry on 17 final draft European Standards supporting the CRA, with comment windows closing between mid-September and mid-November 2026. Public enquiry precedes approval, adoption and citation. A draft still taking comments in November was not adopted in October. That is arithmetic on two published dates, not a forecast.

Corrected six times since publication

Regulation (EU) 2024/2847 was published in the Official Journal on 20 November 2024. It has been corrected there 6 times, the first on 5 December 2024 and the most recent on 25 March 2026. One of those corrections moved a penalty tier.

  • 2024-12-05
    R(01) (EN, 2024/90780): Title: '(EU) No 2019/1020' corrected to '(EU) 2019/1020'
  • 2025-07-02
    R(02) (EN, 2025/90555): Article 64(10): 'paragraphs 3 to 9' corrected to 'paragraphs 2 to 9', extending the carve-outs to the top penalty tier
  • 2025-10-03
    R(03) (FR, 2025/90768): Annex I, Part I, point 2(c): missing 'que'
  • 2025-10-17
    R(04) (EN, 2025/90828): Article 67: '69.' corrected to '72.'
  • 2026-02-23
    R(05) (SK, 2026/90148): Articles 14(6), 16(2) and 16(6): grammatical corrections
  • 2026-03-25
    R(06) (FR, 2026/90243): Annex III, point 6: 'gestion de la qualite' corrected to 'gestion de reseau'

R(01) to R(06), each verified individually against its CELEX record on 20 August 2026. A seventh exists as Council document ST-11264-2026-INIT (German) but is not yet published in the OJ.

AI Act, Regulation (EU) 2024/1689

Harmonised standards cited: 0 (Commission FAQ). High-risk dates re-set by Regulation (EU) 2026/1744, OJ 24 July 2026: Annex III systems 2 December 2027, Annex I systems 2 August 2028.

Machinery, Regulation (EU) 2023/1230

The regulation applies from 20 January 2027, in 119 days. The harmonised standards list is still published under Directive 2006/42/EC. Implementing Decision (EU) 2023/1586 has been amended six times, most recently by (EU) 2026/546 of 12 March 2026. References tracked by this archive: 1,329.

Radio Equipment, Directive 2014/53/EU

EN 18031-1:2024 was cited on 30 January 2025 by Implementing Decision (EU) 2025/138 with two restrictions printed in the list itself. References tracked: 14.

General Product Safety, Regulation (EU) 2023/988

The whole list was repealed and republished on 27 April 2026 by Implementing Decision (EU) 2026/901. The current official page shows only the result; this archive holds both lists. References tracked: 80.

What this page does not measure

This archive began capturing on 10 August 2026. It does not yet hold a history of how far these dates have moved over time, and we will not publish a slippage figure we cannot show the receipts for. Where a date moved in the past, we reconstruct it from the instruments themselves, each one linked above. From here, every change to every tracked source is captured daily and kept.