As of 1 August 2025, all internet-connected radio products placed on the EU market must comply with the new cybersecurity requirements of the Radio Equipment Directive (RED – 2014/53/EU).
BSI can help you demonstrate compliance. As a Notified Body for RED (BSI Netherlands, 2797), we provide third-party testing, gap analysis, and certification services against the new EN 18031 standards - ensuring your products remain market-ready and legally compliant.
Why Test for RED Compliance?
The European Commission has strengthened cybersecurity for connected products through a Delegated Act under the RED. This introduces mandatory requirements for:
-
Article 3.3(d): Network protection – devices must not harm networks or misuse resources.
-
Article 3.3(e): Data protection – safeguards must protect user and subscriber privacy.
-
Article 3.3(f): Fraud prevention – products must support features to protect against fraud.
Failure to comply can result in:
- Market bans, recalls, and withdrawal of CE marking
- Fines and penalties across EU member states
- Seizure of non-compliant products at customs
- Reputational damage and loss of consumer trust
Testing now helps you identify gaps, resolve risks, and secure smooth EU market access.
Which Products Are in Scope?
Any radio equipment that connects to the internet, processes personal data, or enables payments may require RED cybersecurity testing. Examples include:
-
Consumer electronics – smartphones, tablets, laptops, wearables, wireless audio
-
Smart home & IoT – cameras, locks, thermostats, connected appliances, health monitors
-
Fire & safety devices – IoT-enabled fire alarms, suppression systems, emergency lighting
-
Payment & financial devices – POS terminals, contactless readers, crypto transaction devices
-
Automotive & transport – telematics, infotainment, TPMS, connected EV chargers
-
Entertainment & toys – drones, VR headsets, connected games and educational tools
-
Networking & communications – routers, mesh systems, Bluetooth/Zigbee hubs, connected radios
-
Other devices – baby monitors, pet trackers, connected wearables (glasses, jewellery)
Some categories are exempt, such as non-connected radios, military applications, and products already regulated under frameworks like medical devices or aviation – if in doubt, check with BSI and we can advise.
Why Choose BSI?
Working with BSI means choosing a global leader in RED product testing, trusted for quality and assurance, some of the benefits of working with us include:
-
Notified Body for RED (BSI Netherlands, 2797) – third-party testing and issue of compliance reports
-
Deep expertise – experience across ETSI EN 303 645, TS 103 701, PSTI, and connected product security testing
-
State-of-the-art laboratories – fully equipped to test IoT, wireless, and radio products against EN 18031
-
End-to-end services – gap analysis, conformity testing, certification, and ongoing compliance support
-
Trusted by leading brands – BSI has worked with companies like BT and Ring on connected device testing
Secure Your EU Market Access with Confidence
The RED cybersecurity requirements are mandatory from 1 August 2025. By testing with BSI, you gain more than compliance - you gain assurance, market confidence, and the backing of a trusted Notified Body for RED.
