European Commission updates CRA implementation factpage with Annex III/IV-related milestones and application dates (conformity assessment bodies notification; reporting obligations)

The European Commission updated its official Cyber Resilience Act (CRA) implementation factpage ("Progress so far") summarizing key CRA implementation milestones relevant to Annex III (important products) categorisation and downstream obligations. The page highlights prior adoption of the implementing act on technical descriptions for important/critical product categories (Implementing Regulation (EU) 2025/2392) and provides a timeline of upcoming application dates that compliance teams track, including (as stated on the page) application of provisions on notification of Conformity Assessment Bodies (11 June 2026) and application of reporting obligations (11 September 2026). This is an official guidance/timeline update (web content), not a new legal amendment to Annex III, but it affects compliance planning and program timelines for Annex III-scoped products.