What happened
On 2 October 2026 the Italian Council of Ministers approved, in preliminary examination, the legislative decree adapting national law to the Cyber Resilience Act. The decree designates the Agenzia per la cybersicurezza nazionale (ACN) as the notifying authority for conformity assessment bodies, with assessment and monitoring entrusted to the national accreditation body. It also designates ACN as the market surveillance authority, able to call on the Guardia di Finanza. The decree still needs the opinions of Parliament before final adoption.
What it means for machine builders
For an Italian machine builder this answers the question of who will knock on the door. ACN will supervise the CRA on the Italian market. The accreditation body Accredia will assess the Italian bodies that want to become notified bodies. Owners and compliance managers should expect ACN guidance and a national sanctions framework to follow in the coming months. Treat ACN as the counterpart for any question on market surveillance. Watch this page for the final text in the Gazzetta Ufficiale.
Official source Governo italiano, comunicato stampa del Consiglio dei Ministri n. 191
Published 16 October 2026 by Edge SDN. A summary, not legal advice. Always check the official text for your case.