in force 2025-02-04 INSERTED+1,614 −0§
Amended by Regulation (EU) 2025/37 32025R0037
applies from: unknown (an inserted provision states its own application date only in prose)
Article 49a is a newly added provision setting out obligations to make certain information public and to allow information exchange and consultation among the Commission, ENISA, the European Parliament and the Council regarding European cybersecurity certification schemes.
It covers publication of the Commission's requests to ENISA to prepare or review a scheme, quarterly information sharing during scheme preparation, the possibility of inviting discussion on scheme functioning, and consideration of views expressed when the Regulation is evaluated under Article 67.
Cited: Art. 49a, v2
text before / after
inserted text (02019R0881-20250204)
Article 49a Information and consultation on the European cybersecurity certification schemes 1. The Commission shall make the information on its request to ENISA to prepare a candidate scheme or to review an existing European cybersecurity certification scheme as referred to in Article 48 publicly available. 2. During the preparation of a candidate scheme by ENISA pursuant to Article 49, the European Parliament, the Council or both may request the Commission, in its capacity as chair of the ECCG, and ENISA to present relevant information on a draft candidate scheme on a quarterly basis. Upon the request of the European Parliament or the Council, ENISA, in agreement with the Commission and without prejudice to Article 27, may make available to the European Parliament and to the Council relevant parts of a draft candidate scheme in a manner appropriate to the confidentiality level required, and where appropriate in a restricted manner. 3. In order to enhance the dialogue between the Union institutions and to contribute to a formal, open, transparent and inclusive consultation process, the European Parliament, the Council or both may invite the Commission and ENISA to discuss matters concerning the functioning of European cybersecurity certification schemes for ICT products, ICT services, ICT processes or managed security services. 4. The Commission shall take into account, where appropriate, elements arising from the views expressed by the European Parliament and by the Council on the matters referred to in paragraph 3 of this Article when evaluating this Regulation pursuant to Article 67.