Security and privacy

EN 18031 harmonised standards under the RED

Harmonised standards that give a presumption of conformity with the cybersecurity requirements added to the Radio Equipment Directive.

CodeEN 18031
RegionEuropean Union
TypeLinked to EU market access
Issued byCEN/CENELEC standards, cited under the Radio Equipment Directive
Last verified2026-10-10
Quick answerCertification · last verified 2026-10-10

Harmonised standards that give a presumption of conformity with the cybersecurity requirements added to the Radio Equipment Directive. Status: Linked to EU market access. Issued or recognised by CEN/CENELEC standards, cited under the Radio Equipment Directive.

CodeEN 18031
RegionEuropean Union
TypeLinked to EU market access
Issued byCEN/CENELEC standards, cited under the Radio Equipment Directive
GroupSecurity and privacy
Last verified2026-10-10
How to cite this pageIoT Atlas. "EN 18031 harmonised standards under the RED". https://hi-spark.net/certification/en-18031.html Last verified 2026-10-10.

What it means

With the delegated regulation applying from 1 August 2025, internet-connected radio equipment must meet network protection, personal data protection and fraud protection requirements. EN 18031-1, -2 and -3 are the main routes, and testing is done by notified bodies.

Applies to

  • Internet-connected radio equipment in the EU
  • Wearables, cameras, toys and home devices with apps
  • Devices that process personal data or allow payments

What it does not cover

  • GDPR duties of the service operator
  • Radio performance and EMC testing
  • Security of back-end services outside the device scope

Verification checklist

  • Confirm which of the three standards applies to the product
  • Map device features against each requirement clause
  • Engage a notified body early in the schedule
  • Keep the assessment in the technical file with the declaration of conformity