Deadline alert: new rules for protection against cybersecurity risks from August 2025

The number of devices on the EU market that fall within the scope of the RED Directive have increased significantly over the years. When there is a lack of basic security functionality to protect users, security vulnerabilities arise, especially among internet-connected devices. Having recognised the need to update certain rules, the European Commission proposed to add additional requirements for electronic devices. This resulted in a new delegated Regulation published in 2022 and applicable from August 2025.

Electronics subject to new cybersecurity rules from August 2025

As of 1 August 2025, new requirements apply to many internet-connected electronic devices in the European Union. The updated rules concern Articles 3(3) (d), (e) and (f) of the EU Radio Equipment Directive (Directive 2014/53/EU), which sets new provisions for protection against cybersecurity risks. The Regulation that introduced these changes is Commission Delegated Regulation (EU) 2022/30.

The new essential requirements added to Article 3 of the RED Directive apply to the following devices that process personal data, traffic data, or location data:

  • Internet-connected radio equipment
  • Radio equipment for childcare
  • Toys (radio equipment)
  • Radio equipment that users can wear on, strap to, or hung from their body, including clothing (also headwear, handwear, and footwear)

RED manufacturers’ obligations to assess more essential requirements

To be placed on the Union market, the devices mentioned above have to be designed in a way that:

  • They do not harm the network or its functioning and do not misuse network resources.
  • They incorporate safeguards to ensure protection of personal data and privacy.
  • They support certain features ensuring protection from fraud. This applies to internet-connected radio equipment that enables the transfer of money, monetary value, or virtual currency

New provisions for RED devices: focus on sustainability

Together with cybersecurity policies, the European Commission has advanced various motions to promote circular economy and sustainable consumption. One major recent initiative which impacted a wide range of RED devices is the one-charger solution. From December 2024, many rechargeable devices on the EU market must be equipped with a USB Type-C port and bear certain pictograms to inform consumers about their charging features. While the new provisions only concern the charging port of the devices, the upcoming Eco-design Regulation will likely bring new requirements for a uniform charging device as well.

Do you have any questions on compliance of electronics in the EU and UK or need an authorised representative? Contact us here!

References:

European Commission (2025). Internal Market, Industry, Entrepreneurship and SMEs – Radio Equipment Directive (RED). Retrieved on 16/07/2025.

Eur-Lex (2024). Directive 2014/53/EU of the European Parliament and of the Council of 16 April 2014 on the harmonisation of the laws of the Member States relating to the making available on the market of radio equipment and repealing Directive 1999/5/EC. Retrieved on 16/07/2025.

Leave a Reply

Your email address will not be published.

Share This

Copy Link to Clipboard

Copy