CLAIM-2026-08-05-07

Article 24 limits the application of Article 14 to open-source software stewards: the Article 14(1) obligation applies to them only to the extent that they are involved in the development of the product, and the Article 14(3) and 14(8) obligations apply only in respect of severe incidents having an impact on the security of the network and information systems they provide for the development of the product.

Why it matters

Prevents the obvious overreaction. A maintainer who stewards a project without placing a product on the market is not exposed the way a commercial manufacturer is, and the edition should not imply otherwise.

Sources

• europeancyb2024cybere