FAQ item index

Search every question across sub-FAQs

Find the exact question, open the source answer card, and copy a direct link to the anchored sub-FAQ response.

Indexed coverage
856of856items
Across 40 modules • Updated Jul 24, 2026
Author
Sorena AI
Published
Mar 10, 2026
Updated
Jul 24, 2026
EU Cyber Resilience Act Repairs and Spare Parts

Does a better-performing replacement part automatically make the repair substantial?

No. Better performance alone does not make a replacement a substantial modification.

Assess what the changed performance does to the host product. The repair becomes substantial only if the change affects compliance with Annex I Part I, changes the assessed intended purpose, or changes cybersecurity-relevant operation or risk beyond the existing assessment. The replacement may still fall outside the Article 2(6) identical-spare-part exclusion and need its own CRA scope assessment even when the host-product repair is not substantial.

Citations
Cyber Resilience Act

Article 2(6) sets the narrow identical-spare-part exclusion, while Article 3(30) and Recital 42 set the separate substantial-modification test for the repaired product.

Page 58 of 58
Previous1...565758Next