In 2022, the European Commission issued the RED Directive Supplementary Authorization Act (EU) 2022/30, which sets out clear requirements for the cybersecurity, privacy protection and anti-fraud of radio equipment. The bill will come into effect on August 1, 2025. At that time, radio equipment must comply with the network information security requirements of points (d), (e) and (f) of Article 3(3) of the RED Directive before it can be sold in the EU market.

Standard Interpretation

01 Standard coordination

The EN 18031 series of standards is divided into three parts, namely EN 18031-1, EN 18031-2 and EN 18031-3, which respectively correspond to the requirements (d), (e) and (f) of Clause 3(3) of the RED Directive. Some chapters of the EN 18031 series standards are not considered harmonized in some cases. In the absence of harmonization, products must be certified by a designated notified body (NB) before they can be put on the market.

02 Scope of Application

In accordance with the requirements of the RED Directive Supplementary Authorization Act (EU) 2022/30, the new regulations apply to the following three categories of products:

Wireless devices that are directly or indirectly connected to the Internet;

2. Devices involving the processing of user privacy data, such as children's care devices, toys, wearable devices, etc.

3. Internet currency payment, transfer and transaction devices.

Note: 鈶� The requirements of Article 3:Section 3.3(d),(e),(f) of the RED Directive do not apply to medical device equipment within the scope of the MDR regulation. 鈶� The requirements of RED Directive Article 3:Section 3.3(e),(f) do not apply to Regulation (EU) 2018/1139, Regulation (EU) 2019/2144 and Directive (EU). Aviation or road traffic-related equipment within the scope of regulation 2019/520.

03 Test Requirements

In order to ensure that the test requirements are consistent among the three parallel standards (EN 18031-1/2/3), the new standard introduces the concept of "assets" as the main test object and classifies "assets", with each type of asset corresponding to different standard test requirements.

The test contents of the EN 18031 series standards are as shown in the following table, and it is required that these test contents be subject to" Conceptual assessment” "“" "Functional completeness assessment" And ";" Functional sufficiency assessmentFunctional sufficiency assessment”銆�