CN CRA NotebookCRA 閱讀筆記
Working note — actively evolving, may be revised. See /errata for change log. 推進中的筆記,可能持續修改。修訂紀錄見 /errata

Article 39 Regulation (EU) 2024/2847 · Chapter IV 法規 (EU) 2024/2847 · 第四章

Requirements relating to notified bodies 指定機構的要件

Detailed competence, independence, confidentiality, and operational requirements that notified bodies must satisfy. 指定機構必須滿足的能力、獨立性、保密、營運要件詳列。

Paragraphs段落數 · 17 Applies from適用起始 · 11 Jun 2026 Primary audience主要對象 · Notified bodies指定機構 Last reviewed最後校閱 · 2026-04-26 Status狀態 · Working書寫

Block 1 · Official text 區塊 1 · 官方條文

What the Regulation actually says 條文實際怎麼寫

Source. From Regulation (EU) 2024/2847, OJ L 2024/2847 (20 Nov 2024). Translation unofficial; refer to EUR-Lex for binding text. 來源。節錄自《法規 (EU) 2024/2847》,OJ L 2024/2847(2024 年 11 月 20 日)。中文為非官方翻譯;強制適用條文請見 EUR-Lex

Article 39 Requirements relating to notified bodies 1. For the purposes of notification, a conformity assessment body shall meet the requirements laid down in paragraphs 2 to 12.

2. A conformity assessment body shall be established under national law and have legal personality.

3. A conformity assessment body shall be a third-party body independent of the organisation or the product with digital elements it assesses. A body belonging to a business association or professional federation representing undertakings involved in the design, development, production, provision, assembly, use or maintenance of products with digital elements which it assesses, may, on condition that its independence and the absence of any conflict of interest are demonstrated, be considered to be such a third-party body.

4. A conformity assessment body, its top level management and the personnel responsible for carrying out the conformity assessment tasks shall not be the designer, developer, manufacturer, supplier, importer, distributor, installer, purchaser, owner, user or maintainer of the products with digital elements which they assess, nor the authorised representative of any of those parties. This shall not preclude the use of assessed products that are necessary for the operations of the conformity assessment body or the use of such products for personal purposes. A conformity assessment body, its top level management and the personnel responsible for carrying out the conformity assessment tasks shall not be directly involved in the design, development, production, import, distribution, the marketing, installation, use or maintenance of the products with digital elements which they assess, or represent the parties engaged in those activities. They shall not engage in any activity that may conflict with their independence of judgement or integrity in relation to conformity assessment activities for which they are notified. This shall in particular apply to consultancy services. Conformity assessment bodies shall ensure that the activities of their subsidiaries or subcontractors do not affect the confidentiality, objectivity or impartiality of their conformity assessment activities.

5. Conformity assessment bodies and their personnel shall carry out the conformity assessment activities with the highest degree of professional integrity and the requisite technical competence in the specific field and shall be free from all pressures and inducements, particularly financial, which might influence their judgement or the results of their conformity assessment activities, especially as regards persons or groups of persons with an interest in the results of those activities.

6. A conformity assessment body shall be capable of carrying out all the conformity assessment tasks referred to in Annex VIII and in relation to which it has been notified, regardless of whether those tasks are carried out by the conformity assessment body itself or on its behalf and under its responsibility. At all times and for each conformity assessment procedure and each kind or category of products with digital elements in relation to which it has been notified, a conformity assessment body shall have at its disposal the necessary: 52/81 ELI: http://data.europa.eu/eli/reg/2024/2847/oj --- ### EN OJ L, 20.11.2024 (a) personnel with technical knowledge and sufficient and appropriate experience to perform the conformity assessment tasks; (b) descriptions of procedures in accordance with which conformity assessment is to be carried out, ensuring the transparency of and ability to reproduce those procedures. It shall have appropriate policies and procedures in place that distinguish between tasks it carries out as a notified body and other activities; (c) procedures for the performance of activities which take due account of the size of an undertaking, the sector in which it operates, its structure, the degree of complexity of the product technology in question and the mass or serial nature of the production process. A conformity assessment body shall have the means necessary to perform the technical and administrative tasks connected with the conformity assessment activities in an appropriate manner and shall have access to all necessary equipment or facilities.

7. The personnel responsible for carrying out conformity assessment activities shall have the following: (a) sound technical and vocational training covering all the conformity assessment activities in relation to which the conformity assessment body has been notified; (b) satisfactory knowledge of the requirements of the assessments they carry out and adequate authority to carry out those assessments; (c) appropriate knowledge and understanding of the essential cybersecurity requirements set out in Annex I, of the applicable harmonised standards and common specifications, and of the relevant provisions of Union harmonisation legislation and implementing acts; (d) the ability to draw up certificates, records and reports demonstrating that assessments have been carried out.

8. The impartiality of the conformity assessment bodies, their top level management and of the assessment personnel shall be guaranteed. The remuneration of the top level management and assessment personnel of a conformity assessment body shall not depend on the number of assessments carried out or on the results of those assessments.

9. Conformity assessment bodies shall take out liability insurance unless liability is assumed by their Member State in accordance with national law, or the Member State itself is directly responsible for the conformity assessment.

10. The personnel of a conformity assessment body shall observe professional secrecy with regard to all information obtained in carrying out their tasks under Annex VIII or any provision of national law giving effect to it, except in relation to the market surveillance authorities of the Member State in which its activities are carried out. Proprietary rights shall be protected. The conformity assessment body shall have documented procedures ensuring compliance with this paragraph.

11. Conformity assessment bodies shall participate in, or ensure that their assessment personnel are informed of, the relevant standardisation activities and the activities of the notified body coordination group established under Article 51 and apply as general guidance the administrative decisions and documents produced as a result of the work of that group.

12. Conformity assessment bodies shall operate in accordance with a set of consistent, fair, proportionate and reasonable terms and conditions, while avoiding unnecessary burden for economic operators, in particular taking into account the interests of microenterprises and small and medium-sized enterprises in relation to fees.

第 39 條 對指定機構之要求

1. 為通報之目的、合規評鑑機構應符合第 2 至 12 項所規定之要求。

2. 合規評鑑機構應依會員國國內法成立、並具法人資格。

3. 合規評鑑機構應為對其所評鑑之具數位元素產品獨立之第三方機構。

屬於商業協會或專業聯盟之機構、若代表參與其所評鑑之具數位元素產品之設計、開發、製造、提供、組裝、使用或維護之企業、得視為第三方機構、惟以該機構之獨立性及無利益衝突可被證明者為限。

4. 合規評鑑機構、其上層管理階層及執行合規評鑑任務之人員、不得為其所評鑑之具數位元素產品之設計者、開發者、製造商、提供者、進口商、經銷商、組裝者、使用者或維護者;亦不得為代理上述任何一方之代表。此規定不排除使用所評鑑具數位元素產品為合規評鑑機構之活動所必需,亦不排除為個人目的而使用該產品。

合規評鑑機構、其上層管理階層及執行合規評鑑任務之人員、不得直接介入受評鑑具數位元素產品之設計、開發、製造、提供、組裝、使用或維護、亦不得代表參與該等活動之各方。其不得從事任何可能與其判斷之獨立性或合規評鑑活動之誠信相衝突之活動。此規定特別適用於諮詢服務。

合規評鑑機構應確保其子公司或分包商之活動不影響其合規評鑑活動之機密性、客觀性或公正性。

5. 合規評鑑機構及其人員執行合規評鑑活動時、應具備最高度之專業誠信及特定領域必要之技術能力、且不受任何可能影響其判斷或合規評鑑活動結果之壓力與誘因,特別是來自對該活動結果有利益之個人或團體之財務壓力與誘因。

6. 合規評鑑機構應有能力執行依第 32 條及附件八所規定、並就其通報範圍指派之全部合規評鑑任務、無論該等任務是由合規評鑑機構自行執行、或代為執行並由其負責。

不論何時、且就其通報範圍及執行之每一合規評鑑程序與類別之具數位元素產品而言、合規評鑑機構應隨時備妥下列必要資源:執行合規評鑑任務所必需之具技術知識及充分適當經驗之人員;對合規評鑑所執行程序之說明、確保程序之透明度及可重現性。其應有適當之政策與程序以區分依指定機構所執行之任務與其他活動;針對所執行活動進行之程序、應考量企業規模、活動部門及其結構、所涉技術之複雜程度、生產過程之大量或系列性質而具相稱性。

合規評鑑機構應有執行合規評鑑活動所需之相關技術與行政任務之手段,並應有取得所需全部設備或設施之機會。

7. 負責執行合規評鑑任務之人員應具備:完整之技術與職業訓練、涵蓋合規評鑑機構通報之合規評鑑活動之全部範圍;對其執行評鑑相關要求之充分知識、及執行該等評鑑之適當權限、包括對相關歐盟法律及其實施法律行為、相關調和標準及共通規範之知識;起草證書、紀錄與報告以證明評鑑已進行之能力。

8. 應確保合規評鑑機構、其上層管理階層、其子公司、其分包商、及執行合規評鑑任務之任何負責人員之公正性。

合規評鑑機構之上層管理階層及其執行合規評鑑任務之人員之報酬、不得取決於所執行合規評鑑數量或該等評鑑結果。

9. 合規評鑑機構應就責任投保、惟以依國內法該責任由國家承擔或會員國本身對合規評鑑直接負責者除外。

10. 合規評鑑機構之人員應對依本法規或實施本法規之國內法之規定執行其任務時所獲得之全部資訊保持機密、惟對通報之會員國之有權機關除外。專有權應受保護。

11. 合規評鑑機構應參與相關標準化活動、相關監管活動、依據本法規所成立之指定機構協調團體之活動、或確保其執行合規評鑑活動之人員受該等活動之告知,並應將該團體之行政決定與文件作為一般指引應用。

12. 合規評鑑機構應依《法規 (EC) No 765/2008》第 14 條所訂之相關規定運作。

Block 2 · Plain language 區塊 2 · 白話解讀

What this actually means 這其實在說什麼

Reading in progress 閱讀中

Not yet drafted. The Official text in Block 1 above is the binding reference for now. 尚未撰寫。目前以上方區塊 1 的官方條文為準。

Block 3 · APAC perspective 區塊 3 · APAC 觀點

How this lands in Taiwan, Japan, Korea 這一條在台日韓怎麼落地

Reading in progress 閱讀中

Not yet drafted. The Official text in Block 1 above is the binding reference for now. 尚未撰寫。目前以上方區塊 1 的官方條文為準。

Block 4 · Cross-regulation map 區塊 4 · 跨法規對照

Article 39 alongside other regimes 第 39 條與其他法規的對照

Reading in progress 閱讀中

Not yet drafted. The Official text in Block 1 above is the binding reference for now. 尚未撰寫。目前以上方區塊 1 的官方條文為準。