With the explosive growth of Internet of Things (IoT) devices, wireless connectivity has spread into every area of daily life, from smart home devices to wearables, from mobile payments to child monitoring products. The level of cybersecurity protection in these devices, however, varies widely, and personal data leaks, financial fraud and network attacks have become frequent. European Commission research shows that more than 80% of IoT devices have serious security vulnerabilities, which led the EU to bring cybersecurity requirements within the scope of mandatory CE marking.
On 12 January 2022 the Official Journal of the European Union published Delegated Regulation (EU) 2022/30, which sets out explicit cybersecurity compliance requirements for Articles 3.3(d), (e) and (f) of the Radio Equipment Directive (RED). The regulation entered into force on 1 February 2022 with a 42-month transition period, and becomes mandatory in the EU member states on 1 August 2025.