Who is concerned?
RED applies to all radio equipment (any equipment using radio spectrum) placed on the EU market.
- Wireless devices : Wi-Fi, Bluetooth, cellular, NFC, RFID, sub-1GHz IoT
- Internet-connected radio equipment — since August 2025 cybersecurity obligations
- Childcare, wearable, toy radio products — additional safety requirements
If your product has any wireless capability, RED is in scope.
What it requires (high-level)
- Conformity assessment — Module A (self), B+C (Notified Body), H (full quality assurance).
- Harmonised standards — EN 18031 series (cybersecurity), EN 303 645 (consumer IoT baseline).
- Article 3(3)(d)(e)(f) cybersecurity — network resilience, data protection, fraud prevention. Live since 1 Aug 2025.
- SAR testing — for body-worn equipment (specific absorption rate).
- CE marking — required before placing on the market.
Penalty exposure
Primarily market withdrawal and financial penalties under national law (vary by member state, typically €30k–€300k per non-conforming product line).
Practical impact : non-compliance blocks EU market access entirely. Distributors will refuse non-CE-marked products.
How NexCyber helps with RED
- CRA/RED overlap detection — many IoT products fall under both regulations. NexCyber auto-detects overlap and maps controls without double-work.
- EN 18031 alignment — controls auto-mapped to RED Art. 3(3)(d)(e)(f).
- EN 303 645 baseline — consumer IoT requirements pre-filled.
- Conformity dossier — Module A/B+C/H workflow ready for Notified Body review.