From 1 August 2025, all radio equipment placed on the EU market must meet new cybersecurity requirements. The European Commission has strengthened protection for internet-connected radio products through a Delegated Act under the Radio Equipment Directive (RED EN 18031). These updates affect a wide range of devices, from smart home products to wireless payment terminals.
To maintain CE marking and market access, manufacturers must understand their compliance path. You may need a Notified Body depending on how you apply the standards. Our experts at BSI understand the complexities of this change and can streamline your compliance journey.
Set out in EN 18031-1, -2 and -3, the essential requirements include:
- 3(3)(d): Network protection – equipment must not harm or misuse network resources.
- 3(3)(e): Safeguards for personal data and user privacy.
- 3(3)(f): Protection against fraud.
Non-compliance could result in fines, product seizures or market withdrawal. BSI The Netherlands (2797), a Notified Body for RED, provides independent testing to EN 18031 standards, reflecting our expertise in EN 303 645/TS 103 701 and years of experience across connected product types.
