Must notified bodies participate in coordination and standardisation activities?
Yes.
They must participate in, or ensure their assessment personnel are informed of, the relevant standardisation activities and the work of the notified body coordination group established under Article 51, and they must use that group's administrative decisions and documents as general guidance.
Does the CRA say anything about fee levels and SME burden?
Yes.
Notified bodies must operate on consistent, fair, proportionate, and reasonable terms and conditions while avoiding unnecessary burden for economic operators, taking particular account of the interests of microenterprises and SMEs in relation to fees.
How can a conformity assessment body show it meets CRA notified-body requirements?
One route is through relevant harmonised standards.
Article 40 gives a presumption of conformity with Article 39 where the body demonstrates conformity with the relevant harmonised standards, insofar as those standards cover the applicable requirements.
Can a notified body use subcontractors or subsidiaries?
Yes, but only under conditions.
The notified body must ensure that the subcontractor or subsidiary meets the Article 39 requirements, inform the notifying authority, take full responsibility for the outsourced tasks, and obtain the manufacturer's agreement.
What does a body have to submit when applying to become a notified body?
It must submit an application to the notifying authority of the Member State where it is established.
That application must include a description of the conformity-assessment activities, the procedures, and the products for which it claims competence and, where applicable, an accreditation certificate. If there is no accreditation certificate, the body must provide documentary evidence showing compliance with Article 39.
When can a body start acting as a CRA notified body?
Only after the Article 43 notification procedure is complete.
If the notification is based on an accreditation certificate, the body may operate if no objection is raised within two weeks. If the notification is not based on accreditation, the no-objection period is two months.
The Commission assigns each notified body a single identification number and publishes an up-to-date public list of notified bodies, their identification numbers, and the activities for which they have been notified.
What happens if a notified body no longer meets the CRA requirements?
The notifying authority must restrict, suspend, or withdraw the notification, depending on the seriousness of the problem.
If the notification is restricted, suspended, or withdrawn, or the notified body stops activity, the notifying Member State must ensure that the body's files are either handled by another notified body or kept available for the responsible notifying and market-surveillance authorities.
Can the Commission challenge the competence of a notified body?
Yes.
The Commission must investigate cases where it doubts, or is told to doubt, the competence of a notified body or its continued fulfilment of the applicable requirements. If the Commission concludes that the body no longer meets the requirements for notification, it requests corrective measures from the notifying Member State, including de-notification if necessary.
What operational obligations apply once a body is already notified?
It must carry out conformity assessments in accordance with Article 32 and Annex VIII, in a proportionate way that avoids unnecessary burden but still preserves the required degree of rigour and protection.
What information must notified bodies share with notifying authorities?
They must inform the notifying authority about refusals, restrictions, suspensions, or withdrawals of certificates, circumstances affecting the scope or conditions of notification, certain information requests from market-surveillance authorities, and, on request, information about their conformity-assessment activities, including cross-border activities and subcontracting.
What information must notified bodies share with other notified bodies?
They must provide other notified bodies carrying out similar conformity-assessment activities for the same products with relevant information on negative results and, on request, positive results.
Annex VIII adds more specific certificate-sharing duties for module B and module H approvals.
What does the Commission do at system level for CRA notified bodies?
The Commission must organise exchange of experience between national authorities responsible for notification policy and ensure appropriate coordination and cooperation between notified bodies through a cross-sectoral group of notified bodies.
Member States must ensure that their notified bodies participate in that group, directly or through designated representatives.
Did the CRA's notified-body framework apply before the rest of the CRA?
Yes.
Chapter IV, which includes Articles 35 to 51 on notified bodies and notification, applies from 11 June 2026, even though most CRA obligations apply later.
Can AI Act notified bodies also assess CRA cybersecurity requirements for certain high-risk AI systems?
Yes, where the CRA's conditions are met.
Article 12(2) says that notified bodies competent under the AI Act may also control conformity of high-risk AI systems falling within the CRA, provided their compliance with the CRA's Article 39 requirements has been assessed in the AI Act notification procedure.
Does a manufacturer have to choose a CRA notified body from its own Member State?
No.
Where the CRA requires a notified body, the relevant procedures let the manufacturer apply to a single notified body of its choice. The CRA also states that notified bodies may offer their services throughout the Union. In practice, the key legal limit is not the manufacturer's location but whether the chosen body's notification covers the relevant CRA procedure and product scope.
Does a body's presence on NANDO mean it can assess any CRA product or module?
No.
The CRA notification must specify the conformity-assessment activities, the module or modules, and the product or products with digital elements for which the body is competent. The public list likewise shows the activities for which the body has been notified. So a manufacturer should check that the body's CRA notification actually covers the relevant module and product scope.