Radio Equipment Directive (RED)

EU Directive 2014/53/EU sets out the requirements for radio equipment and wireless devices in order to obtain CE marking and be permitted to be placed on the market in the European Union. Its aim is to ensure safety, efficiency, and the harmonized use of the radio spectrum. In addition to traditional product safety, the RED also covers electromagnetic compatibility, efficient frequency use, and cybersecurity. 

The EN 18031 series of standards specifies Article 3.3 of the Radio Equipment Directive and defines security mechanisms in the area of cybersecurity. All products that fall under the RED and are placed on the market in the EU must therefore comply with new security standards (e.g. access controls, secure updates, cryptography, etc.) in order to obtain CE marking. 

Important: RED is not the same as EN 18031!

The RED applies in principle to all products with a radio interface, regardless of whether the new, more specific cybersecurity requirements of EN 18031 apply. This means that your product may well fall under the RED without having to meet the additional requirements of the standard.

More on RED requirements

The RED generally applies to all radio equipment – that is, devices that are intended to transmit or receive radio waves, for example via Wi‑Fi, Bluetooth, or mobile networks, such as:

• Communication devices (mobile phones, radios)
• IoT & Smart Devices (wearables, connected toys, IoT sensors)
• OT (control systems)

In practice, this affects a large proportion of connected consumer and industrial products. Early classification of your own product is therefore essential.

Failure to comply with the RED can have serious consequences. In Germany, the Federal Network Agency is responsible as the market surveillance authority for enforcement under the Radio Equipment Act (FuAG). It can request information and documentation for proof of conformity and, in the event of violations, order corrective measures or impose penalties. Possible consequences include:

• Fines
• Recall of products already sold
• Sales and import bans

Anyone who integrates cybersecurity requirements into product development at an early stage avoids these risks and saves the expense of costly rework shortly before market launch.

RED and the Cyber Resilience Act (CRA) pursue a common goal: greater cybersecurity for connected products in the EU. Until December 10, 2027, the RED Delegated Act serves as the applicable framework for radio equipment with digital elements; conformity is demonstrated through the EN 18031 series of standards.

From December 11, 2027, the CRA will take over this role: radio equipment with digital elements will then fall under Annex I of the CRA, specified by a forthcoming horizontal standard. Conceptually, this new standard builds on the structures of EN 18031, meaning: 

Anyone who consistently implements the RED cybersecurity requirements therefore creates the foundation for later CRA conformity.

The Radio Equipment Directive (RED Directive 2014/53/EU) is the key EU directive for placing radio equipment on the market in the European Economic Area. It defines essential requirements for safety, electromagnetic compatibility (EMC), and the efficient use of the radio spectrum. Since August 2025, it also includes binding cybersecurity requirements pursuant to Article 3.3 (d)–(f) for certain product categories. Compliance with the RED is a prerequisite for CE marking and thus for market access in the EU. In Germany, the directive is implemented through the Radio Equipment Act (FuAG); the market surveillance authority is the Federal Network Agency (Bundesnetzagentur).

There is no formal “RED approval” in the sense of an official government authorization—instead, market access is obtained through the manufacturer’s self-declaration of conformity (EU Declaration of Conformity). The prerequisite for this is that your product meets the RED’s essential requirements for safety, EMC, and radio spectrum use as well as, depending on the product category, the cybersecurity requirements from Article 3.3 (d)–(f). TQ supports you throughout the entire process through to RED conformity assessment and market readiness.

Conformity is generally demonstrated through the application of harmonized standards such as the EN 18031 series, which establish a presumption of conformity. In many cases, a self-assessment by the manufacturer is sufficient. For more complex or higher-risk products, in cases of incomplete application of the harmonized standards, or in the case of certain EN 18031 exclusion clauses, however, the involvement of a notified body is required. TQ supports you in classifying your product and throughout the entire assessment process.

Yes. The decisive factor is not the place of manufacture, but placing the product on the EU market. Manufacturers, importers, and distributors based outside the EU must also ensure that their radio equipment complies with the requirements of the RED before it is sold or put into service in the EU. Importers have their own duty of care and must verify the manufacturer’s conformity before placing the product on the market.

Directive 2014/53/EU lays down the essential requirements that radio equipment must meet before it may be made available on the EU market. These include product safety, electromagnetic compatibility, and efficient, interference-free use of the radio spectrum. It is supplemented by provisions on conformity assessment, technical documentation, and CE marking. Through Delegated Regulation (EU) 2022/30, cybersecurity requirements were also added for connected, data-processing, and transaction-capable radio equipment, which have applied since August 2025.