Article 65 Regulation (EU) 2024/2847 · Chapter VII 法規 (EU) 2024/2847 · 第七章
Representative actions 代表訴訟
Annex II added to Directive (EU) 2020/1828 — consumers may bring representative actions for CRA infringements that harm collective consumer interests. 《指令 (EU) 2020/1828》附件二新增本法規，消費者得就侵害集體消費者利益之 CRA 違反提起代表訴訟。
Block 1 · Official text 區塊 1 · 官方條文
What the Regulation actually says 條文實際怎麼寫
Source. From Regulation (EU) 2024/2847, OJ L 2024/2847 (20 Nov 2024). Translation unofficial; refer to EUR-Lex for binding text. 來源。節錄自《法規 (EU) 2024/2847》，OJ L 2024/2847（2024 年 11 月 20 日）。中文為非官方翻譯；強制適用條文請見 EUR-Lex。
Directive (EU) 2020/1828 of the European Parliament and of the Council shall apply to the representative actions brought against infringements by traders of provisions of this Regulation that harm or may harm the collective interests of consumers.
《歐洲議會與理事會指令 (EU) 2020/1828》應適用於就交易者違反本法規規定而損害或可能損害集體消費者利益所提起之代表訴訟。
Block 2 · Plain language 區塊 2 · 白話解讀
Why one short article opens manufacturers to consumer class actions 為什麼一條短條文讓製造商面對消費者集體訴訟
Article 65 is one sentence. It applies the EU Representative Actions Directive (2020/1828) to CRA infringements that harm consumer collective interests. This single cross-reference creates a private enforcement channel parallel to public market surveillance. APAC manufacturers used to thinking "only the regulator can hit me" need to add "and qualified consumer organisations can sue me".
Representative Actions Directive 2020/1828 — the engine. The Directive lets "qualified entities" (consumer organisations meeting specific qualification criteria) bring representative actions for the protection of consumer collective interests. Actions can seek injunctions (stop the infringement) and redress (compensation, repair, replacement, refund). The Directive applies to a long list of EU consumer law instruments — and CRA Article 65 adds CRA to that list.
Consumer collective interests — broad concept. The Directive defines "consumer collective interests" broadly. A defective batch of consumer connected products that exposes thousands of consumers to data theft is a consumer collective interest case. A long-tail of small individual harms aggregating to substantial consumer impact qualifies. Single individual disputes do not — those go through ordinary consumer protection procedures.
Cross-border representative actions are possible. The Directive lets qualified entities from one Member State bring representative actions in another Member State. A German consumer organisation can sue an APAC manufacturer in France for harm to French consumers if procedural conditions are met. APAC manufacturers selling consumer connected products across the EU face potentially 27 venues, not 1.
Public-private enforcement runs parallel. Article 54 (market surveillance) and Article 65 (representative actions) can run simultaneously on the same incident. A market surveillance authority orders product withdrawal; a consumer organisation files for damages. Different tracks, different timelines, possibly different findings. APAC manufacturers should plan crisis response for both tracks.
第 65 條只有一句。它把 EU 代表訴訟指令（2020/1828）適用於損害消費者集體利益之 CRA 違反。這個單一交叉引用創造跟公部門市場監督平行的私人執法管道。習慣想成「只有主管機關能告我」的 APAC 製造商、需要加上「合格消費者組織也能告我」。
代表訴訟指令 2020/1828：引擎。該指令讓「合格實體」（符合特定資格標準的消費者組織）就保護消費者集體利益提起代表訴訟。訴訟可請求禁制令（停止違反）跟救濟（賠償、修理、替換、退款）。該指令適用於一長串 EU 消費者法工具，CRA 第 65 條把 CRA 加進該清單。
消費者集體利益，廣泛概念。該指令對「消費者集體利益」定義廣泛。讓數千名消費者面臨資料竊取的瑕疵連網消費產品批次、是消費者集體利益案件。多個小型個別損害累積到實質消費者影響、符合資格。單一個別爭議不符合，那走一般消費者保護程序。
跨境代表訴訟可行。該指令讓一個會員國的合格實體在另一會員國提起代表訴訟。符合程序條件時、德國消費者組織可在法國對 APAC 製造商提告法國消費者所受損害。在 EU 全境賣消費連網產品的 APAC 製造商、面對潛在 27 個審判地、不是 1 個。
公 / 私執法平行運作。第 54 條（市場監督）跟第 65 條（代表訴訟）可在同一事件上同時跑。市場監督機關命令產品撤回；消費者組織提告損害賠償。不同軌道、不同時程、可能不同認定。APAC 製造商應為兩個軌道做危機回應規劃。
Block 3 · APAC perspective 區塊 3 · APAC 觀點
Class actions and APAC consumer-product makers' new exposure 集體訴訟跟 APAC 消費產品製造商的新風險
For most APAC manufacturers, EU consumer class action is a new exposure. The US has long had Rule 23 class actions; Asia mostly has not. EU representative actions under 2020/1828 are rapidly becoming a real enforcement channel, with active qualified entities in Germany, France, Netherlands, Italy. CRA Article 65 puts cybersecurity violations on this channel.
對多數 APAC 製造商、EU 消費者集體訴訟是新風險。美國長期有 Rule 23 集體訴訟；亞洲多半沒有。2020/1828 下的 EU 代表訴訟正快速變成實質執法管道、德、法、荷、義皆有活躍的合格實體。CRA 第 65 條把網路安全違反放上這個管道。
| Member State會員國 | Active qualified entities活躍合格實體 | APAC consumer-product exposureAPAC 消費產品風險 |
|---|---|---|
| Germany德國 | vzbv (Verbraucherzentrale Bundesverband), Bundesverband der Verbraucherzentralen.vzbv（聯邦消費者中心協會）、消費者中心聯邦協會。 | Highest exposure — vzbv has track record of high-profile actions; large consumer market for APAC connected products.風險最高，vzbv 有重要訴訟紀錄；APAC 連網產品的大消費市場。 |
| France法國 | UFC-Que Choisir, CLCV, Familles de France.UFC-Que Choisir、CLCV、Familles de France。 | High exposure — UFC-Que Choisir is aggressive, well-resourced, has tech-related track record.風險高，UFC-Que Choisir 積極、資源充足、有科技相關訴訟紀錄。 |
| Netherlands荷蘭 | Consumentenbond, Stichting Massaschade & Consument.Consumentenbond、Stichting Massaschade & Consument。 | High exposure — Dutch courts have established mass-claim infrastructure; foundations actively bring cases.風險高，荷蘭法院已建立集體請求基礎；基金會積極提案。 |
| Italy / Spain義大利 / 西班牙 | Altroconsumo, Codacons; OCU, FACUA.Altroconsumo、Codacons；OCU、FACUA。 | Mid exposure — active organisations; class action infrastructure still developing.中等風險，組織活躍；集體訴訟基礎仍在發展。 |
| Other Member States其他會員國 | Mostly local consumer associations; less aggressive cross-border action so far.多為地方消費者協會；目前跨境訴訟較不積極。 | Lower per-Member-State exposure but still possible via cross-border representative actions.每會員國風險較低、但跨境代表訴訟仍可能。 |
A practical risk-management observation: APAC consumer product makers should add Article 65 / 2020/1828 representative-action exposure to their D&O insurance and product liability insurance review for EU-sold SKUs. Existing policies often pre-date the Directive's 2023 transposition deadline and may not cover representative-action defence costs / settlements. EU consumer class actions can result in seven-figure settlements; defence costs alone can reach low six figures.
實務風險管理觀察：APAC 消費產品製造商、應把第 65 條 / 2020/1828 代表訴訟風險、加進 EU 銷售 SKU 的 D&O 保險與產品責任保險審查。現有保單常常先於該指令 2023 年轉化截止日、可能不涵蓋代表訴訟防禦成本 / 和解。EU 消費者集體訴訟可導致七位數和解；單防禦成本可達低六位數。
A second observation: a successful Article 14 vulnerability disclosure may itself become evidence in an Article 65 case. The disclosure makes the underlying defect public; consumer organisations have material to build a case on. APAC manufacturers should coordinate Article 14 disclosure language with potential Article 65 exposure — accurate, factually limited, no admissions of liability.
第二個觀察：成功的第 14 條弱點揭露本身可能成為第 65 條案件的證據。揭露讓底層缺陷公開；消費者組織有素材建立案件。APAC 製造商應協調第 14 條揭露語言跟潛在第 65 條風險，準確、事實有限、不承認責任。
Block 4 · Cross-regulation map 區塊 4 · 跨法規對照
Article 65 in the EU collective redress landscape 第 65 條在 EU 集體救濟全景中
CRA Article 65 hooks into a much broader EU consumer enforcement framework. The Representative Actions Directive 2020/1828 connects to GDPR, GPSR, AI Act, MDR, and many other consumer-protection regimes. CRA 第 65 條接到一個遠更廣的 EU 消費者執法框架。代表訴訟指令 2020/1828 連接到 GDPR、GPSR、AI Act、MDR、與許多其他消費者保護制度。
Representative Actions Directive 2020/1828 — the umbrella mechanism代表訴訟指令 2020/1828：傘狀機制
2020/1828 is the EU's collective-redress instrument. Annex I lists 70+ EU legal acts that can trigger representative actions — GDPR, GPSR, MDR, AI Act, Consumer Rights Directive, Unfair Commercial Practices Directive, etc. CRA Article 65 adds CRA to this list. The qualified entity infrastructure already exists; CRA just plugs into it.
2020/1828 是 EU 的集體救濟工具。附件一列出 70+ 個可觸發代表訴訟的 EU 法律行為，GDPR、GPSR、MDR、AI Act、消費者權利指令、不公平商業行為指令等。CRA 第 65 條把 CRA 加進這個清單。合格實體基礎已存在；CRA 只是接上去。
GDPR Article 80 — data protection class actionsGDPR 第 80 條：資料保護集體訴訟
GDPR Article 80 lets non-profit bodies bring representative actions for data subjects. CRA-related cybersecurity incidents often involve personal data exposure → GDPR Article 80 + CRA Article 65 actions can run together. APAC connected-product makers facing a CRA breach with privacy implications can face dual representative actions.
GDPR 第 80 條讓非營利組織為資料主體提代表訴訟。CRA 相關網路安全事件常涉及個資外洩 → GDPR 第 80 條 + CRA 第 65 條訴訟可一起跑。面對涉及隱私的 CRA 違反的 APAC 連網產品製造商、可面對雙重代表訴訟。
GPSR 2023/988 + Representative ActionsGPSR 2023/988 + 代表訴訟
GPSR is on the 2020/1828 Annex I list. Consumer connected products with safety defects can face GPSR + CRA + 2020/1828 actions. The same incident can produce three regulatory tracks: GPSR market surveillance, CRA market surveillance, and consumer organisation representative action — running on different timelines.
GPSR 在 2020/1828 附件一清單上。具安全缺陷的消費連網產品、可面對 GPSR + CRA + 2020/1828 訴訟。同一事件可產生三個法規軌道：GPSR 市場監督、CRA 市場監督、消費者組織代表訴訟，在不同時程上跑。
EU AI Act 2024/1689 Article 110 — AI-specific representative actionsEU AI Act 2024/1689 第 110 條：AI 特定代表訴訟
AI Act Article 110 mirrors CRA Article 65 — applies 2020/1828 to AI Act infringements affecting consumer collective interests. For products bundling high-risk AI under PwDE, both representative-action channels can be activated simultaneously by qualified entities.
AI Act 第 110 條鏡映 CRA 第 65 條：把 2020/1828 適用於影響消費者集體利益之 AI Act 違反。對搭配高風險 AI 在具數位元素產品下的產品、合格實體可同時啟動兩個代表訴訟管道。
Product Liability Directive 2024/2853 — strict liability產品責任指令 2024/2853：嚴格責任
The new Product Liability Directive (2024/2853) establishes strict liability for defective products, explicitly extending to PwDE and software. PLD claims can be brought individually or via representative actions. APAC manufacturers face stacked exposure: CRA Article 65 representative action + PLD strict liability claims = consumer redress without the consumer needing to prove negligence. The new PLD is the strongest private-enforcement instrument in the EU consumer landscape.
新產品責任指令（2024/2853）對瑕疵產品建立嚴格責任、明文擴展到具數位元素產品與軟體。PLD 請求可個別或透過代表訴訟提起。APAC 製造商面對疊加風險：CRA 第 65 條代表訴訟 + PLD 嚴格責任請求 = 消費者救濟不需證明過失。新 PLD 是 EU 消費者全景中最強的私人執法工具。