Skip to content

Due Care

What is Due Care?

The level of care that a reasonable person would exercise in protecting organizational information assets and complying with security requirements.

Governance

What the standards actually require on due care

Requirements naming due care across 6 standards, quoted from the control text.

If an appropriately cleared technician is not used to undertake maintenance or repairs of IT equipment, the technician is escorted by someone who: - is appropriately cleared and briefed - takes due care to ensure that data is not disclosed - takes all responsi...

ISM-0306 · If an appropriately cleared technician is not used to undertake maintenance or repairs of

Article 19 requires importers to verify before placing a PDE on the market that the manufacturer has carried out the conformity assessment procedure, that CE marking and EU declaration of conformity are present, that technical documentation is available, that...

CRA-Art.19_20 · Obligations of importers and distributors (Articles 19-20)

Article 10 governs authorised representatives (written mandate; tasks include keeping the EU declaration / technical documentation available for 10 years + cooperation with market surveillance).

GPSR-Art.10_11_12 · Authorised representatives, importers and distributors (Articles 10-12)

Article 13 requires importers to verify that the IVD has been CE-marked, the EU declaration of conformity has been drawn up, the manufacturer is identified, the manufacturer has appointed an authorised representative (if non-EU), the device is registered with...

IVDR-Art.13_14 · Obligations of importers and distributors (Articles 13-14)

Article 12 requires a non-EU manufacturer to designate, by written mandate, an authorised representative established in the Union, with Article 12(3) tasks (keep EU DoC + technical documentation for 10 years + cooperation with MSA).

MR-Art.12_13_14_15_16 · Authorised representative, importers and distributors (Articles 12-16)

Article 11 requires a non-EU manufacturer to designate, by written mandate, a single authorised representative established in the Union, with Article 11(3) tasks. Article 12 governs orderly change of AR.

MDR-Art.11_12_13_14 · Authorised representative, importers and distributors (Articles 11-14)

Questions people ask about due care

What is Due Care?
The level of care that a reasonable person would exercise in protecting organizational information assets and complying with security requirements.
Why is Due Care important for compliance?
Due Care is a key concept in Governance. Understanding due care helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 686 frameworks with 311K cross-framework control mappings.
Which compliance frameworks address Due Care?
Due Care appears in the requirement text of Australian Information Security Manual, EU Cyber Resilience Act, EU General Product Safety Regulation (GPSR, Regulation 2023/988), EU In Vitro Diagnostic Medical Devices Regulation (IVDR), EU Machinery Regulation (Regulation (EU) 2023/1230). Across these standards we have identified 6 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Due Care?
Explore our compliance framework pages to see how due care applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 686 frameworks.

See how Due Care applies across compliance frameworks

Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.

Written and maintained by Gerard Blokdyk, The Art of Service.