http://www.legislation.gov.uk/eur/2014/165/article/20Regulation (EU) No 165/2014 of the European Parliament and of the Council of 4 February 2014 on tachographs in road transport, repealing Council Regulation (EEC) No 3821/85 on recording equipment in road transport and amending Regulation (EC) No 561/2006 of the European Parliament and of the Council on the harmonisation of certain social legislation relating to road transport (Text with EEA relevance)Regulation (EU) No 165/2014 of the European Parliament and of the CouncilRegulation (EU) No 165/2014 of the European Parliament and of the Council of 4 February 2014 on tachographs in road transport, repealing Council Regulation (EEC) No 3821/85 on recording equipment in road transport and amending Regulation (EC) No 561/2006 of the European Parliament and of the Council on the harmonisation of certain social legislation relating to road transport (Text with EEA relevance)King's Printer of Acts of Parliamenthttps://webarchive.nationalarchives.gov.uk/eu-exit/https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02014R0165-20200820texttext/xmlen2025-06-18Expert Participation2025-04-21 CHAPTER III<Strong><Substitution ChangeId="key-4031a7987fe1b48a08e02b397efaa74e-1692373486096" CommentaryRef="key-4031a7987fe1b48a08e02b397efaa74e">TYPE-APPROVAL</Substitution></Strong><Substitution ChangeId="key-4031a7987fe1b48a08e02b397efaa74e-1692373486096" CommentaryRef="key-4031a7987fe1b48a08e02b397efaa74e">Security</Substitution>Article 201Manufacturers shall design, test and review vehicle units, motion sensors and tachograph cards put into production so as to detect vulnerabilities arising in all phases of the product life-cycle, and shall prevent or mitigate their possible exploitation. The frequency of tests shall be at least every two years.2Manufacturers shall submit the documentation necessary for vulnerability analysis to the person who, under Article 12, is responsible for issuing security certificates.3If, in the course of the tests referred to in paragraph 1, vulnerabilities in system elements (vehicle units, motion sensors and tachograph cards) are detected, no security certificate is to be issued and, accordingly, no type-approval application is to be considered (see Article 12(3)). If vulnerabilities are detected in the course of the tests referred to in paragraph 1 for elements already on the market, the manufacturer shall inform the Secretary of State. The Secretary of State shall take all measures necessary to ensure that the problem is addressed, in particular by the manufacturer (including, where necessary, the withdrawal of type-approval).Ch. 3 substituted (31.12.2020) by The Drivers' Hours and Tachographs (Amendment etc.) (EU Exit) Regulations 2019 (S.I. 2019/453), regs. 1(3), 81; 2020 c. 1, Sch. 5 para. 1(1)