Through the Delegated Act under the Radio Equipment Directive (RED), the European Commission (EC) has taken steps to strengthen the cybersecurity of wireless devices and products available in the EU. Originally planned to be implemented in August 2024, the implementation of the regulation has been postponed to 2025 due to the progress of various relevant departments coordinating multiple tasks around standards. Therefore, from August 1, 2025, all wireless devices and products sold in the European Union (EU) must comply with the requirements of the RED Authorization Act.

While manufacturers are looking forward to the release of unified standards, they can carry out their compliance preparations with the support of SGS (an internationally recognized testing, inspection and certification agency). IoT products manufactured by your own company can be certified according to globally recognized cybersecurity standards (such as ETSI EN 303 645 and IEC 62443-4-2). The relevant standards include requirements consistent with the cybersecurity provisions outlined in the Radio Equipment Directive (RED), providing manufacturers with timely and effective clarity on the upcoming regulatory framework. By cooperating with relevant organizations announced by SGS (an internationally recognized testing, inspection and certification agency), manufacturers can obtain the SGS Cyber Security Mark as a seal of approval through an assessment process. With the SGS Cybersecurity Mark, manufacturers can demonstrate their readiness, compliance, and market differentiation before RED requirements become mandatory standards, boosting consumer confidence in the safety and reliability of their products.

The scope of implementation of the safety requirements of the Radio Equipment Directive (RED)

The RED Authorization Act introduces new legal requirements for developers of wireless devices and products that face risks from cyberattacks and privacy issues. These requirements apply to the following equipment categories:

(1) Devices capable of communicating through the Internet, including electronic devices such as smartphones, tablets, and electronic cameras, as well as telecommunications equipment and Internet of Things equipment;

(2) Toys and child care equipment, including baby monitors;

(3) Wearable devices such as smart watches and fitness trackers.

In accordance with Article 3(3) of Directive 2014/53/EU(RED), legislative requirements include basic elements to ensure protection against cybersecurity risks, as follows:

(1) Network protection - item 3(3);

(2) Personal data and privacy protection-Item 33(3)e;

(3) Prevention of currency fraud - Item 33(3)f.

Manufacturers will be faced with two options when carrying out conformity assessment procedures before placing their products on the European Union (EU) market:

(1) After the official release in June 2024. Self-assessment against uniform standards;

(2) Rely on the third-party evaluation report provided by the safety laboratory and SGS notified body to obtain the EU type certification letter.