What it means
With the delegated regulation applying from 1 August 2025, internet-connected radio equipment must meet network protection, personal data protection and fraud protection requirements. EN 18031-1, -2 and -3 are the main routes, and testing is done by notified bodies.
Applies to
- Internet-connected radio equipment in the EU
- Wearables, cameras, toys and home devices with apps
- Devices that process personal data or allow payments
What it does not cover
- GDPR duties of the service operator
- Radio performance and EMC testing
- Security of back-end services outside the device scope
Verification checklist
- Confirm which of the three standards applies to the product
- Map device features against each requirement clause
- Engage a notified body early in the schedule
- Keep the assessment in the technical file with the declaration of conformity