Implementing three essential requirements of the RED
The delegated act activates three essential requirements in Article 3 of the Radio Equipment Directive, as follows:
-
3(3)(d) Network protection: radio equipment must not harm the network or its functioning nor misuse network resources.
-
3(3)(e) Protection of personal data and privacy: equipment must incorporate safeguards to protect the personal data and privacy of users and subscribers.
-
3(3)(f) Protection from fraud: equipment must support features that ensure protection against fraud.
The EN 18031 series of harmonised standards
To meet these requirements, the European Commission has adopted the EN 18031 series as harmonised standards, each corresponding to one of the three RED requirements:
-
EN 18031-1: corresponds to 3(3)(d), focusing on network security requirements.
-
EN 18031-2: corresponds to 3(3)(e), covering personal privacy protection.
-
EN 18031-3: corresponds to 3(3)(f), focusing on protection against fraud.
Scope and assessment mechanism, in one chart:
The EN 18031 series maps the assessment items to different security mechanism requirements (14 main items in total)
Recommendations for companies
With just over a month left before the act applies, time is short. To avoid products being barred from the EU market after 1 August 2025 for not complying with the EN 18031 series, companies need to prepare the following test materials in advance:
-
Product samples and related software and apps;
-
Product instructions and user manuals;
-
Test application form;
-
Technical documentation (including the software bill of materials (SBOM), security design documents, etc.);
-
Questionnaire answers (as the basis for the decision trees);
-
Existing cybersecurity test reports (e.g. reports against ETSI EN 303 645 or IEC 62443-4-2).
END
Our services
More articles:
China NMPA Registration: Applying Real-World Data in Clinical Evaluation of Medical Devices
Detailed Guide to the Medical Device Classification Determination Procedure
The Complete Australian Medical Device Registration Process Explained
Clinical Evaluation Routes and Methods in MDR Certification
