Preparing for the EU Radio Equipment Directive security requirements

This advisory outlines mandatory cybersecurity requirements under the EU Radio Equipment Directive (2014/53/EU), effective 1 August 2025 and applicable in the UK, covering all wireless devices (e.g., IoT, wearables, toys, EV chargers, industrial IoT). It details new baseline obligations for network protection, personal data/privacy safeguards, and fraud prevention; maps them to the EN 18031 series and related standards (ETSI EN 303 645, IEC 62443-4-2, ETSI TS 103 929); explains conformance via self-assessment or notified body (with potential changes under the EU Cyber Resilience Act); and highlights available security evaluation services.