Radio devices cannot reach the market without cybersecurity testing
From 1 August 2025 every radio device sold in the EU must pass cybersecurity testing. It covers protection of the network, of personal data and of the user money.
- The duty covers everything that transmits wirelessly — from a router or camera to a toy with connectivity.
- Until now testing covered emissions, immunity and electrical safety; a fourth area has been added.
- The requirements fall into three groups: protecting the network from the device, protecting personal data and protecting against loss of money in payments.
- The harmonised standards of the EN 18031 series state in one document what the device must be able to do and how to check it.
- Some checks are a review of documentation and design, others are tests on a unit: default passwords, software update, encryption, behaviour after a failed login.
- For electronics laboratories this is a new line of work, closer to computing than to classic electromagnetic compatibility.
- Manufacturers are now looking for one place to have the full set of tests for the declaration of conformity done.
Source: CEN-CENELEC