Home / Markets / European Union

Market entry

IoT certification requirements in European Union

CE marking is the entry ticket, and since August 2025 connected radio equipment must also meet the RED cybersecurity requirements.

9 certification records apply · last reviewed 2026-10-14

Certifications that apply

CE / RED

CE marking under the Radio Equipment Directive

The Radio Equipment Directive 2014/53/EU is the main route to CE marking for wireless products sold in the European Union.

Open the certification page →EN 18031

EN 18031 harmonised standards under the RED

Harmonised standards that give a presumption of conformity with the cybersecurity requirements added to the Radio Equipment Directive.

Open the certification page →EMC

EMC Directive 2014/30/EU

The European directive that requires equipment to limit electromagnetic emissions and to be immune to interference in its intended environment.

Open the certification page →RoHS

Restriction of Hazardous Substances

Restricts lead, mercury, cadmium, hexavalent chromium and certain phthalates in electrical and electronic equipment sold in the EU.

Open the certification page →REACH

REACH SVHC and SCIP notification

European chemicals regulation that places duties on suppliers when a product contains a Substance of Very High Concern above the threshold.

Open the certification page →WEEE

Waste Electrical and Electronic Equipment

Rules that make producers responsible for financing the collection and recycling of electrical and electronic equipment.

Open the certification page →EU Battery

EU Battery Regulation (EU) 2023/1542

Replaces the older battery directive with wider duties covering carbon footprint, recycled content, labelling, due diligence and removability.

Open the certification page →GDPR

EU General Data Protection Regulation

The core EU law on processing personal data, including data collected by connected devices, apps and cloud services.

Open the certification page →EN 303 645

ETSI EN 303 645 consumer IoT security baseline

Widely referenced baseline of thirteen security provisions for consumer IoT devices, from no universal default passwords to secure updates.

Open the certification page →

What to prepare

Identify the applicable directives and harmonised standards
Decide whether a notified body is required
Build and retain the technical file for the required period
Sign the EU declaration of conformity
Apply the CE mark, importer details and language requirements
Confirm which of the three standards applies to the product
Map device features against each requirement clause
Engage a notified body early in the schedule

Frequently asked questions

Which certifications are mandatory to sell an IoT device in European Union?

CE / RED (CE marking under the Radio Equipment Directive), EMC (EMC Directive 2014/30/EU), RoHS (Restriction of Hazardous Substances), REACH (REACH SVHC and SCIP notification), WEEE (Waste Electrical and Electronic Equipment), EU Battery (EU Battery Regulation (EU) 2023/1542), GDPR (EU General Data Protection Regulation). Each record lists the issuing body, what it covers and what it does not cover.

Are voluntary marks needed as well?

EN 303 645 - ETSI EN 303 645 consumer IoT security baseline

Where can I read the official requirement?

Every certification record links to the issuing body or the regulation text. Start from this page, open the record and follow its source links.

Does a certificate for a module cover the finished product?

No. A module certificate covers the module; the finished device usually needs its own approval or a documented module grant reference. Confirm with the issuing body or your test laboratory.