Brussels (Belgium) | 30 October 2025
The European Association of Motorcycle Manufacturers (ACEM) welcomes the publication in the Official Journal of the European Union of the Commission Delegated Regulation (EU) 2025/1455, amending Delegated Regulation (EU) No 44/2014, and the Commission Delegated Regulation (EU) 2025/1535, supplementing Regulation (EU) 2024/2847 (Cyber Resilience Act).
With these two delegated acts now published:
- L-category vehicles* shall comply with the UNECE R155 on cybersecurity requirements. These requirements will apply from 11 December 2027 for new vehicle types, and from 11 June 2029 for existing vehicle types.
- Consequently, L-category vehicles* will be excluded from the scope of Regulation (EU) 2024/2847 (Cyber Resilience Act)
- Both delegated acts will enter into force on the twentieth day following their publication in the Official Journal of the European Union, i.e. on 18 November 2025
- *This applies to L-category vehicles as defined in Regulation (EU) No 168/2013, except for L1e vehicles designed to pedal.
The UNECE Regulation No. 155 has been developed specifically for the automotive sector. It has implications not only for vehicles themselves but also for manufacturers’ organisational structures and their supply chains. UNECE R155 establishes mandatory requirements for vehicle manufacturers to establish a Cyber Security Management System (CSMS) that covers the development, production, and post-production phases of a vehicle’s lifecycle, ensuring continuous identification, assessment, mitigation, and monitoring of cybersecurity risks, including those arising from suppliers. Manufacturers are also required to conduct regular testing, monitoring, and annual reporting on the effectiveness of their cybersecurity measures.
The L-category vehicle industry remains fully committed to working at both the UNECE and EU level, continuing close cooperation in the fields of cybersecurity and digitalisation. The sector values the constructive collaboration and fruitful exchanges with the European Commission in recent months.
Documents :
UNECE R155 : https://eur-lex.europa.eu/legal-content/ENG/TXT/PDF/?uri=OJ:L_202500005
Commission Delegated Regulation (EU) 2025/1455 amending Delegated Regulation (EU) 44/2014: https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=OJ:L_202501455
Commission Delegated Regulation (EU) 2025/1535 supplementing the Regulation (EU) 2024/2847 (Cyber Resilience Act): http://eur-lex.europa.eu/legal-content/EN/TXT/?uri=OJ:L_202501535
For more information, please contact:
Pierluca Cialoni – Regulatory Officer
About ACEM
The European Association of Motorcycle Manufacturers (ACEM) represents manufacturers of mopeds, motorcycles, three-wheelers and quadricycles (L-category vehicles) in Europe.
ACEM members include 17 manufacturing companies: BMW Motorrad, Bombardier Recreational Products (BRP), Ducati Motor holding, Harley-Davidson, Honda, Kawasaki, KTM, KYMCO, MV Agusta, Peugeot Motocycles Group, Piaggio, Polaris Industries, Royal Enfield, Suzuki, Triumph Motorcycles, Yamaha and Zero Motorcycles.
ACEM also represents 18 motorcycle industry associations in 17 different European countries. About 300,000 jobs depend on the L-category industry in Europe. There are more than 39 million motorcycles and scooters on Europe’s roads (2019 estimate).
