Dashcams and GPS trackers process two of the most sensitive data categories: location and video. A compromised GPS tracker reveals a person's or vehicle's real-time position. A compromised dashcam exposes video footage of the driver's surroundings. EU fleet operators, logistics companies and consumer buyers will require CRA documentation. GPS trackers for children fall under Annex III point 19 as Class I. Most consumer dashcams and adult GPS trackers are Default. CRACheck generates 8 PDF documents per Annex VII. 15-25 minutes. €149 per product. Browser-side.
€149 one-time · 8-document ZIP · 15-25 minutes · Browser-side
Location data is personal data. Video is personal data. CRA documentation protects both.
Location data is personal data. Video is personal data. CRA documentation protects both.
Encryption in transit is one element. Annex I Part I point 1(c) requires protection of confidentiality of stored, transmitted and processed data. If your tracker stores location history in unencrypted flash memory, or if the cloud API allows unauthenticated access to historical location data, the product does not meet Annex I requirements. Document the full data lifecycle.
Annex III point 19 explicitly covers "personal wearable products that are intended for the use by and for children." A GPS watch marketed for children's safety is Class I. The child-safety context elevates the classification regardless of the product's technical simplicity.
If a vulnerability in your dashcam's firmware allows remote access to video footage or real-time camera feed, it is a cybersecurity incident affecting privacy. Article 14 requires notification to ENISA within 24 hours of becoming aware of active exploitation. Dashcam vulnerabilities have been publicly demonstrated by security researchers.
Dashcams and GPS trackers combine camera, location, LTE/WiFi and cloud connectivity. CRACheck generates 8 documents covering the full digital surface.
Determines product category per Annex III. Defines conformity assessment route under Art. 32.
Complete technical documentation structured per Art. 31 and Annex VII. All 8 mandatory sections.
Cybersecurity risk assessment per Art. 13.2 and Art. 13.3. Mapped against Annex I Part I requirements.
Information and instructions per Annex II. Security properties, support period, vulnerability reporting.
EU declaration of conformity per Art. 28 and Annex V.
Coordinated Vulnerability Disclosure policy per Annex I Part II.
Pre-structured for 24h early warning, 72h notification, 14-day final report under Art. 14.
Key dates: Art. 14 from 11 Sep 2026, full enforcement 11 Dec 2027, support period per Art. 13.8.
Mira antes de comprar — Descargar dossier de muestra (PDF, empresa ficticia) — Estructura real, artículos reales, formato real. Datos ficticios.
Generated in your browser. No product data is transmitted to any server.