Radio Equipment Directive (RED) Compliance

Get to know more about RED cybersecurity requirements
book a free consultation

Companies who chose us

Radio Equipment Directive Overview

The Radio Equipment Directive 2014/53/EU (RED) establishes a legal framework for radio equipment by laying down essential requirements for electromagnetic compatibility, health and safety, the effective use of radio spectrum, and the support of efficient use of radio spectrum. Article 3(3) of the Directive specifies further essential requirements as well, where the most challenging could be the cybersecurity-related items (d), (e), and (f). The Delegated Regulation (EU) 2022/30 clarifies that these requirements shall be applied to any radio equipment that can communicate itself over the Internet. These are the so-called internet-connected radio equipment, where compliance with the cybersecurity aspects of the essential requirements is crucial. Since 1 August 2025, manufacturers have been required to comply with the new cybersecurity obligations of RED.

Essential Requirements of the RED Directive

  • 3(3)(d), to ensure network protection;

  • 3(3)(e), to ensure safeguards for the protection of personal data and privacy;

  • 3(3)(f), to ensure protection from fraud.

The new requirements officially became mandatory on August 1, 2025, following the European Commission’s decision. Manufacturers have now reached the end of the 42-month transition period.

Red Directive's Impact on IoT Security

There were an estimated 703 million mobile cellular subscriptions in Europe in 2021. 

This represents a penetration rate of 121% of the population

Approximately 9.6 billion Wi-Fi devices were used globally by the end of 2021

This number is higher than the present population of the Earth.

Understanding Radio Equipment Directive 2014/53/EU (RED)?

With the emergence of Wi-Fi, Bluetooth, and NFC, more products becoming internet-connected devices and behaving like radio equipment that are used in several fields of our life. Radio equipment covers a range of products, including devices that intentionally emit and/or receive radio waves for communication, such as mobile phones, smart devices, and Wi-Fi routers, as well as devices that use radio frequencies for remote control functions, such as garage door openers and remote-controlled toys.These products fall under the scope of the RED and must undergo a conformity assessment procedure to ensure that they meet the essential requirements of the directive before they can be placed on the European market. The RED provides several options for manufacturers to demonstrate their products meet EU requirements:
1. Internal Production Control (Module A): this method allows manufacturers to assess their products internally, provided that they have the necessary competence and capabilities to evaluate equipment and its documentation.If the manufacturer does not have the competency for conformity assessment, has not applied the harmonized standards, or if there are no harmonized standards for the given essential requirements, then the manufacturer shall select one of the following options:
2. EU-Type Examination (Module B) + Conformity to Type (Module C): First stage (module B): this approach requires an independent assessment by a Notified Body. The Notified Body examines the technical design of the radio equipment and verifies that it meets the essential requirements. This means the manufacturer must create detailed technical documentation demonstrating compliance with the product design and production capabilities. Although the Notified Body examines only the relevant documents, this documentation must include test reports covering the various aspects of the RED essential requirements. If the manufacturer lacks the competence to perform the necessary tests, a competent testing laboratory can be engaged. After a positive result from the EU-Type Examination, the Notified Body issues the certificate.
The Second stage (module C):
Next, the manufacturer must ensure ongoing compliance through internal production controls.
3. Full Quality Assurance (Module H):
For this option, the manufacturer implements a comprehensive quality management system, which is then assessed and approved by a Notified Body. This ensures that the production processes consistently produce compliant products, providing the highest level of assurance.
Ultimately, the manufacturer is responsible for the compliance of its product, regardless of whether a Notified Body was involved in the conformity assessment procedure or not.


After the successful conformity assessments, the manufacturer must complete the technical documentation (including the certificate issued by the Notified Body, if necessary) and draw up the Declaration of Conformity. Only after these steps can the CE Marking be affixed to the product, allowing it to be placed on the EU market.
To better understand the above conformity assessment options, it's important to know about the relevance of the harmonized status of a European standard. A European standard, issued by CEN, CENELEC, or ETSI, becomes harmonized when it is listed in the Official Journal of the European Union under the given directive or regulation. A harmonized standard is prepared to address appropriate provisions for the essential requirements. That is why if a product complies with all applicable harmonized standards, it is presumed to comply with the essential requirements set out in the directive.The harmonized standards under RED can be checked on the EU website.
The Delegated Regulation (EU) 2022/30 was adopted by the European Commission (EC) in October 2021 and entered into force on 1 August 2025. This act specifies that internet-connected radio equipment shall comply with the cybersecurity-related essential requirements as well.
Currently, there is no harmonized standard to cover the cybersecurity aspects of essential requirements of the Radio Equipment Directive. However, the standard ETSI EN 303 645 has been widely accepted by the industry and is also used as the state of the art by notified bodies for conformity assessment of consumer IoT devices. EU Commission mandated CEN and CENELEC to prepare harmonized standards EN 18031-1, EN 18031-2, and EN 18031-3 that will cover the new cybersecurity requirements for the Radio Equipment Directive. These measures address various aspects of cybersecurity in the EU to ensure that radio equipment is secure, reliable, and compatible across different EU member states. If there is no harmonized standard for the cybersecurity aspects of RED essential requirements, the manufacturer shall apply for Notified Body certification.
The planned standard series EN 18031 will apply to internet-connected radio equipment. When the standard is selected for the designing of a product and the conformity assessment, it’s important to carefully verify the scope of the standards to check their applicability. Depending on the intended use, and the purpose of the product, different standards may be applicable for consumer IoT devices and industrial control systems and components. In the latter case the standard series IEC 62443 should be used.

This delegated act was adopted by the European Commission (EC) in October 2021 and entered into force on 1 August 2025.
The EC plans to create new harmonized standards based on the requirements of the new delegated act.
Based on workshops and presentations from the ESOs and commission, the harmonized standards will likely be based on existing IoT cybersecurity standards EN 303 645 and IEC 62443-4-2.

Are you prepared for the RED cybersecurity requirements now in force?

Get professional support and ensure compliance immediately!

CCLab is ready to help you comply with the existing cybersecurity standards for consumer IoT devices (ETSI EN 303 645)  and for IIoT Industrial Control System components (ISA/IEC 62443-4-2). Compliance with these relevant standards can help demonstrate conformity with the relevant requirements of the RED.

As both consumer IoT devices and certain types of ICS equipment may fall under the scope of the RED, adherence to relevant cybersecurity standards and practices is essential for compliance. Adhering to these standards can enhance the security, privacy, and reliability of radio equipment and consumer IoT devices, aligning with the objectives of the RED. We provide consultation and testing services for both Consumer IoT devices and for Industrial IoT components that comply with the RED directive.CCLab’s cybersecurity testing laboratory has been qualified by the RED Notified Body CerTrust (ID: 2806). Thus, cybersecurity evaluations can be accepted by CerTrust for Notified Body certification.

The definitive guide to crafting Compliant IoT Devices and high-quality developer documentation for ETSI EN 303 645 Certification

Facing challenges?

Are you finding it difficult to navigate the complexities of ETSI EN 303 645 for securing your IoT devices?

Wondering if your existing product documentation meets the stringent standards set out by this cybersecurity benchmark?

Do you feel that meeting ETSI's security requirements is an intricate and overwhelming task?

Whether you're gearing up for your first dive into the Internet of Things (IoT) security certification, or you're looking to refine your approach to compliance with ETSI EN 303 645 without unnecessary expenditure of time and resources,

This course is your key to unlocking simplicity in compliance.

Enroll now

Why is the RED directive important?

1.

Regulatory Framework

Ensures radio equipment meets safety, health, and environmental protection requirements in the European market

2.

Conformity Assessments

Requires manufacturers to demonstrate compliance with technical standards, reducing risks and ensuring safety.

3.

Harmonization

Aims to harmonize regulations across member states, creating a level playing field for manufacturers.

Prepare Your Product for RED Compliance

Get your product ready for RED compliance by understanding the ETSI EN 303 645 or ISA/IEC 62443-4-2 standards and conditions. Contact us for guidance.

Would you utilize your products' conformity outside the EU as well?

The standards of consumer IoT devices (ETSI EN 303 645) and industrial control systems and components (IEC 62443-4-2) are recognized in several countries in the world. If your target markets are not the EU, then you can use efficient certifications to cover several markets based on one test. This is the IECEE CB Scheme which is the largest international certification scheme for electrical and electronic products and components (including IoT products). Its goal is to facilitate the international trade of manufacturers in more than 50 member countries.

CCLab is a recognized CB Testing Laboratory under the National Certification Body of QIMA Certification (Germany) GmbH. We offer our CB testing and certification for IoT and IIoT devices.

You can read more about CB certification on our website:

read more

Cybersecurity for Consumer IoT Devices and ICS Components in RED

How do cybersecurity for consumer IoT devices and Industrial Control Systems (ICS) components relate to RED?

Consumer IoT and industrial control system (ICS) cybersecurity are related to the RED (Radio Equipment Directive) in addressing security requirements for radio equipment placed on the EU market. While the RED primarily focuses on ensuring safety, electromagnetic compatibility, and efficient use of the radio spectrum, it also emphasizes the importance of security considerations for all types of radio equipment. Both consumer IoT devices and ICS components may fall under the scope of the RED, and adherence to relevant cybersecurity standards and practices is essential for compliance.

Consumer IoT devices cybersecurity - ETSI EN 303 645

ETSI EN 303 645 is the first globally applicable Cybersecurity Standard for Consumer IoT Devices.It contains a set of 13 security categories and some provisions specifically focused on Data Protection. The ETSI EN 303 645 standard aims to prepare IoT devices to be protected against the most common cybersecurity threats and to prevent large-scale attacks against connected devices. It provides a basis for future IoT certification schemes. 

The Radio Equipment Directive (RED) covers a broad range of radio equipment intended for consumer use e.g. smart home devices, wearable devices, home automation devices, and connected healthcare devices.

Consumer IoT manufacturers seeking RED compliance for IoT devices can benefit from following the cybersecurity guidelines provided by ETSI EN 303 645. These guidelines address aspects such as secure development practices, vulnerability management, secure communication, and user privacy.

CCLab provides consultation, and testing services, and states conformity (SoC) after the successful evaluation of Consumer IoT devices based on ETSI EN 303 645. For the EU market, we can offer you the EU-Type Examination Certificate issued by our partner Notified Body. In the case of international markets, we can provide you CB Certification for consumer IoT devices. Do you need support to evaluate your consumer IoT device?

CONTACT US

Industrial Control System cybersecurity - ISA/IEC 62443

ISA/IEC 62443 is a globally recognized set of cybersecurity standards designed to safeguard industrial automation and control systems (IACS). These standards provide a comprehensive framework for establishing secure and resilient IACS environments, helping to protect critical infrastructure such as power plants, manufacturing facilities, oil and gas installations, and transportation systems.

The ISA/IEC 62443 series consists of several parts, each focusing on different aspects of industrial cybersecurity. IEC 62443-4-2 outlines the processes and practices that should be followed while developing and implementing IACS components to mitigate cybersecurity risks. It specifies the technical security requirements that manufacturers and developers should consider to ensure the secure design, coding, and testing of their products.

Certain types of ICS equipment that include radio functions or wireless communication capabilities may be subject to RED, e.g. wireless sensors, remote controllers, and wireless communication modules. These radio equipment manufacturers can benefit from following the principles and best practices outlined in ISA/IEC 62443. Adhering to these standards can help in developing secure radio equipment that aligns with the objectives of the RED, particularly about the security and privacy aspects.

Also in the case of industrial control systems, you can benefit from the CB Certificate that can be utilized for RED compliance and to access markets outside the EU.

CCLab is ready to help you to conform and comply with the desired standards and security levels.

CONTACT US

How can CCLab help

One-stop-shop solution including cybersecurity testing, single FPOC

Semi-automated solutions, followed by automation (in 2025)

Agile project management to maximize efficiency

Global outreach, no language barriers

Quick turnaround time

Participating in industrial working groups

Check Our FAQ for More Information

Do you have questions about Radio Equipment Cybersecurity and RED compliance? Explore our FAQ for answers.

check our faq

Contact Us for Radio Equipment Security Support

Need assistance with your Radio Equipment Security project? Reach out to us for expert guidance.

CONTACT US

Testimonials

Kenneth Lasoski

Kenneth Lasoski

Versa Networks

Evaluation team was extremely reasonable and flexible with resolution to findings and was helpful in finding agreeable solutions for CB comments. Consultation team was always responsive and helped shape the documentation for easier evaluation, and provided useful recommendations on satisfying SFR/SARs.

Thierry Bonda

Thierry Bonda

Landis+Gyr

CCLab was well prepared, flexible during the whole evaluation process, and supported us with continuous communication and guidance. Many lessons were learnt during the project and CCLab has always been looking for solutions, supporting our developers the best way they could. The new Swiss evaluation methodology was a good and professional basis to work with, but both parties had to learn how to deal with it.

Jake Nelson

Jake Nelson

Corsec Security Inc.

The relationship between Corsec and CCLab has been instrumental in helping product vendors successfully complete the Common Criteria certification process. As a Common Criteria consultant to the product vendor, Corsec relies on CCLab’s responsiveness and expertise to quickly and thoroughly complete the testing component of the process. CCLab has been essential in managing multiple projects, their professionalism has helped ensure product vendor satisfaction and ultimate project success.

Alexander Testov

Alexander Testov

AO Kaspersky Lab.

"I would definitely recommend CCLab to anyone in need of Common Criteria certification. Our cooperation was comfortable, well organized and efficient. I am totally satisfied with the result."

Dayton Marcucci

Dayton Marcucci

HID Global

The CCLab team gave us full support to adapt to the changes during product development. Whatever the challenges faced they could keep the due dates and we were able to complete the process quickly and efficiently. The real agile lab helped our success. We are going to work with them again. I highly recommend them to anyone wanting to get its product certified.

Jaime Chica

Jaime Chica

NXP Semiconductors

It was a well-managed project which achieved success in an effortless manner.

Kalev Pihl

Kalev Pihl

SK ID Solutions

We needed a lab that works quickly but with high work morale and quality of work. CCLab is exactly like that! It was good cooperation experience to work with them. The project was rather complex and our expectations maybe even too high, but the team was committed to the common goals and could keep the milestones; therefore we were able to deliver what was needed. I highly recommend CCLab team to anyone for their great team spirit, quality orientations, agility and reasonable pricing.

Israr Ahmed

Israr Ahmed

Ascertia Ltd.

On behalf of Ascertia, accept my appreciation for the excellent job done by CCLab team over the past several months in achieving the Common Criteria Certificate for ADSS Server SAM solution. It was an enormous undertaking but went smoothly and efficiently! Thanks to your leadership and dedication combined with your staff's teamwork and energy, we achieved our target. You and your employees should take great pride in this accomplishment. We look forward to extend our work with you for our next certification milestone and hope will continue to get such excellent service.

Zsolt Rózsahegyi

Zsolt Rózsahegyi

I4P Informatics Ltd.

Thanks to the agile processes we've been able to add new features to the product during the evaluation that made it even more valuable to customers. CCLAB efficiently supported us throughout the whole change management process. The predictability, accurate scheduling, and supportive mindset helped us to finish the project in time.

FAQ

What is the Radio Equipment Directive (RED)?

The Radio Equipment Directive (RED) is a regulatory framework established by the European Union (EU) for the harmonization of radio equipment within the EU market. It is officially known as Directive 2014/53/EU. The RED replaced the previous EU legislation, the Radio and Telecommunications Terminal Equipment (R&TTE) Directive.

The purpose of the RED is to ensure that radio equipment placed on the EU market meets essential requirements related to health and safety, electromagnetic compatibility (EMC), and efficient use of the radio spectrum. It aims to facilitate the free movement of radio equipment across EU member states while ensuring a high level of protection for users and preventing interference between different radio equipment.

The RED applies to a wide range of radio equipment, including wireless devices, radio transmitters, receivers, telecommunications terminal equipment, and satellite communications equipment. It covers both professional and consumer products that use the radio frequency spectrum for communication or transmission purposes.

Under the RED, manufacturers are required to demonstrate compliance with the essential requirements and ensure that their products bear the CE marking, indicating conformity with applicable EU directives. The directive also sets out obligations for economic operators, including importers and distributors, to ensure that only compliant radio equipment is placed on the market.

The RED harmonizes the requirements for radio equipment across the EU and provides a framework for market surveillance and enforcement by member states to ensure ongoing compliance and safety of radio equipment.

What is the purpose of the RED?

The purpose of the Radio Equipment Directive (RED) is to establish a regulatory framework that ensures the safety, electromagnetic compatibility (EMC), and efficient use of radio spectrum for radio equipment placed on the market within the European Union (EU). The directive aims to achieve the following objectives:

  • Safety and Health Protection
  • Electromagnetic Compatibility (EMC)
  • Efficient Use of Radio Spectrum
  • Cybersecurity and Data Protection
  • Universal Charging Compatibility (Common Charger, Directive (EU) 2022/2380)
  • Harmonization and Free Movement
  • Protection of End Users

Who does the RED apply to?

The Radio Equipment Directive (RED) applies to various economic operators involved in placing radio equipment on the market within the European Union (EU). The directive outlines the obligations and responsibilities of the following parties:

  • Manufacturers: The RED applies directly to manufacturers of radio equipment. They are responsible for ensuring that their products comply with the essential requirements specified in the directive. Manufacturers must perform conformity assessment procedures, prepare technical documentation, affix the CE marking on compliant products, and fulfill other obligations defined by the directive.
  • Authorized Representatives: Manufacturers based outside the EU must appoint an authorized representative within the EU. The authorized representative acts on behalf of the manufacturer to ensure compliance with the RED and represent the manufacturer's interests in regulatory authorities and market surveillance.
  • Importers: Importers, who bring radio equipment from non-EU countries into the EU market, have specific obligations under the RED. They must verify that the equipment complies with the essential requirements, ensure proper documentation is available, and only place compliant products on the market. Importers are responsible for affixing their name, registered trade name, or registered trademark on the equipment and maintaining records of the manufacturer and the equipment's compliance.
  • Distributors: Distributors, who supply radio equipment within the EU market, also have certain obligations. They must verify that the equipment bears the CE marking, is accompanied by required documentation, and meets the essential requirements. Distributors must not make any changes that may affect the compliance of the equipment, cooperate with market surveillance authorities, and provide information on product traceability.

It's important to note that the RED also applies to economic operators involved in making radio equipment available on the market under their name or trademark, those who modify equipment's compliance, or those who assemble equipment from components to form a new product.

What types of products are covered under the RED?

The Radio Equipment Directive (RED) covers a wide range of products that utilize the radio frequency spectrum for communication or transmission purposes. The directive applies to various types of radio equipment, including

  • Wireless Devices: E.g. smartphones, tablets, laptops, smartwatches, wireless headphones, wireless speakers, wireless keyboards, and other portable electronic devices that incorporate radio functionality for communication or data transmission.
  • Radio Transmitters and Receivers: This includes radio transmitters used in broadcasting, amateur radio equipment, citizen band (CB) radios, two-way radios, walkie-talkies, and radio modules integrated into other devices.
  • Telecommunications Terminal Equipment: Such as fixed-line telephones, cordless telephones, Voice over IP (VoIP) devices, and modems.
  • Satellite Communications Equipment: The RED also includes radio equipment used for satellite communications, including satellite phones, satellite modems, satellite data terminals, and satellite receivers.
  • Broadcasting Equipment: Equipment used for broadcast radio and television transmission, including radio and TV broadcast transmitters, studio equipment, audio and video broadcasting receivers, and satellite broadcasting receivers.
  • Short-Range Devices: The directive covers short-range radio devices used for specific purposes, such as wireless LAN (Wi-Fi) equipment, Bluetooth devices, wireless microphones, RFID (Radio Frequency Identification) devices, remote control devices, and other similar short-range radio applications.
  • Internet-Connected Radio Equipment: Devices capable of communicating over the internet (directly or via other equipment) are now subject to specific cybersecurity requirements (Article 3.3(d), (e), and (f)).

What documentation or technical documentation is required for compliance with the RED?

Compliance with the Radio Equipment Directive (RED) requires the preparation and availability of various documentation and technical documentation. Here are the key documents that manufacturers or their authorized representatives must have to demonstrate compliance with the RED:

Technical Documentation: Manufacturers are required to create and maintain technical documentation that demonstrates the conformity of the radio equipment with the essential requirements of the RED. This documentation should be readily available for inspection by relevant authorities and should contain sufficient information to assess the compliance of the equipment. It typically includes:

  • General description of the equipment
  • Design and manufacturing drawings and specifications
  • List of applicable standards or other technical specifications followed
  • Descriptions of solutions adopted to meet essential requirements
  • Results of design calculations, risk assessments, and test reports
  • User and installation manuals, if applicable
  • Information on labeling and marking of the equipment

Can manufacturers self-declare compliance with the RED, or is third-party involvement necessary?

Manufacturers have the option to self-declare compliance with the Radio Equipment Directive (RED) for most categories of radio equipment. This means they can carry out the conformity assessment themselves and issue the Declaration of Conformity (DoC) without the involvement of a third-party organization.

The RED allows for self-declaration of conformity through the "Internal Production Control" (Module A) conformity assessment procedure. Under this module, manufacturers or their authorized representatives are responsible for ensuring that the radio equipment meets the essential requirements of the directive but for certain categories of radio equipment with higher risks or specific characteristics, the involvement of a notified body is mandatory for the conformity assessment process. In these cases, third-party involvement is necessary, and the manufacturer cannot solely rely on self-declaration. The specific categories that require notified body involvement are outlined in the RED.

What are the penalties for non-compliance with the RED?

Non-compliance with the Radio Equipment Directive (RED) can lead to various penalties and consequences depending on the regulations and enforcement practices of individual European Union (EU) member states. Potential penalties for non-compliance with the RED could be:

  • Market Withdrawal or Recall
  • Administrative Measures
  • Fines and Financial Penalties
  • Legal Proceedings
  • Restricted Market Access
  • Reputational Damage

Manufacturers, importers, and distributors need to ensure compliance with the RED to avoid potential penalties and consequences. Compliance with the directive's requirements helps protect consumers, ensure fair competition, and promote the availability of safe and reliable radio equipment in the EU market.

Penalties for non-compliance with the Radio Equipment Directive (RED) vary among the European Union (EU) member states. Each member state is responsible for implementing and enforcing the directive within its jurisdiction, including determining the penalties for non-compliance. Penalties and enforcement measures are typically determined by national legislation or regulations enacted by individual EU member states.

Can manufacturers place radio equipment on the market that is compliant with international standards but not yet fully compliant with the RED?

Manufacturers can market radio equipment that meets international standards but is not yet fully compliant with the Radio Equipment Directive (RED) under certain conditions. The RED allows for a transitional period during which equipment complying with certain previous standards can still be placed on the market, provided that it does not endanger the safety of people, property, or the environment.

During this transitional period, manufacturers can continue to place radio equipment on the market that meets the essential requirements of older standards recognized by the European Commission. However, they should make efforts to ensure compliance with the RED as soon as possible.

After the end of the transitional period, manufacturers must ensure that their radio equipment fully complies with the requirements of the RED to continue placing it on the market within the EU.

How does a conformity assessment under the Radio Equipment Directive take place?

The specific procedure for conformity assessment depends on the category and characteristics of the radio equipment. Here is a general overview of the conformity assessment process under the RED

Determine the Appropriate Module: Identify the applicable conformity assessment module based on the category and characteristics of the radio equipment. The RED defines differences that outline specific procedures for conformity assessment.

  • Module A - Internal Production Control
  • Module B: EU-Type Examination
  • Module C: Conformity to Type based on Internal Production Control plus Supervision of a Notified Body
  • Module D: Conformity to Type based on Quality Assurance of the Production Process
  • Module E: Conformity to Type based on Product Verification
  • Module F: Conformity to Type based on Unit Verification

Prepare the Required Documentation: Regardless of the module used, prepare the necessary technical documentation, including design and manufacturing specifications, risk assessments, test reports, and descriptions of solutions adopted to meet the essential requirements.

Issue Declaration of Conformity (DoC): After a successful conformity assessment, issue a Declaration of Conformity (DoC) stating that your radio equipment meets the essential requirements of the RED.

CE Marking and Market Access: Apply the CE marking on your compliant radio equipment to indicate conformity with the RED. This marking allows for the legal placement of the equipment on the market within the European Union.

It's important to note that the specific requirements and procedures for conformity assessment may vary depending on the characteristics and intended use of the radio equipment. It is recommended to consult with an expert.

When will the new cybersecurity requirements of RED become mandatory?

The European Commission has officially granted an extension to the transition period for the Delegated Act (2022/30) associated with the Radio Equipment Directive (2014/53/EU). As a result of this decision, compliance with the specified cybersecurity requirements will become obligatory starting from the 1st of August 2025. It means that any devices in the scope of the RED Delegated Act will need to be compliant when placed into the European market after August 1, 2025.

What types of radio equipment require additional security measures under the RED?

As of August 1, 2025, the RED mandates that radio equipment with internet connectivity or certain wireless functionalities must comply with enhanced cybersecurity requirements, per the Delegated Act (2022/30). This includes internet-connected devices, childcare radio equipment, and wearable radio equipment.

When did the new cybersecurity requirements of RED become mandatory?

The European Commission established that compliance with the specified cybersecurity requirements became obligatory starting from the 1st of August 2025. It means that all devices in the scope of the RED Delegated Act (such as internet-connected devices, cameras, smart home tech, and wearables) must comply to be placed into the European market today. Non-compliant equipment can no longer be legally placed on the market.

Does my device need a USB-C port (Common Charger)?

Yes, if it is a small or medium-sized portable electronic device capable of being recharged via wired charging. As of December 28, 2024, the Common Charger Directive (Directive (EU) 2022/2380) mandates that mobile phones, tablets, digital cameras, headphones, handheld video game consoles, portable speakers, e-readers, keyboards, mice, portable navigation systems, and earbuds must be equipped with a USB-C receptacle. Note: For laptop computers, this requirement will become mandatory starting April 28, 2026

Can manufacturers use compliance marks other than the CE mark under the RED?

No, the CE mark is the mandatory compliance mark for RED, indicating conformity with EU standards. It is essential for gaining legal access to the EU market.