cetecom advanced

New cybersecurity requirements for market approval in the EU

New Delegated EU Regulation has been published in the Official Journal of the EU.
State-of-the-art cybersecurity for IoT devices and the surrounding IT networks

The Radio Equipment Directive (RED) 2014/53/EU sets the legal framework for all products using radio technologies. Key defined requirements are health and safety, electromagnetic compatibility and efficient use of radio frequencies. Manufacturers and suppliers of these products must demonstrate compliance with RED in the EU market by providing type examination based on technical documentation (TD) or declaration of conformity (DoC) and CE marking.

Recently, Delegated Regulation EU 2022/30 was published in the Official Journal of the EU. This regulation supplements parts of Article 3.3 of the RED and thus acquires relevance for manufacturers of products with wireless technologies who wish to place their products on the market in the EU.

The Delegated Regulation EU 2022/30 defines requirements in the area of cybersecurity for products covered by the RED. This concerns in particular sections d) to f) of Article 3.3:

d) Radio equipment does not harm the network or its functioning nor misuse network resources, thereby causing an unacceptable degradation of service

e) Radio equipment incorporates safeguards to ensure that the personal data and privacy of the user and of the subscriber are protected

f) Radio equipment supports certain features ensuring protection from fraud

What does this mean for manufacturers or distributors?

With a transition period of 30 months (beginning January 2022), manufacturers are required to test their products to the new cybersecurity requirements and declare compliance based on these specifications. However, this only affects devices that are newly approved and not devices that are already on the market.

The problem with the current situation, however, is that the cybersecurity requirements based on the new regulation have not yet been harmonized and therefore no accredited tests are possible yet.

If you have any questions, please do not hesitate to contact us: https://cetecomadvanced.com/en/contact/

About the author and this article

cetecom advanced is a global testing and certification service provider and part of the RWTÜV Group.

We are a state-recognized testing laboratories that is accredited worldwide for a wide range of testing services. With our testing services in accordance with international regulations, we help to bring electrical/electronic products safely onto the international market. Furthermore, we carry out product approvals in over 180 countries and renowned brands from all industries have been relying on our expertise since 1993.

This technical article was written according to strict editorial standards. All information contained in the article is the result of careful research on the subject. All specialist articles have been checked by the relevant specialist departments in our laboratories, which are responsible for testing and approving a wide range of radio products on a daily basis.

Officially accredited by, among others:
Stay up to date.
The cetecom advanced newsletter is sent out about once a month. No constant follow-up mails.
Only selected content from our experts.