RED Compliance Deadline: August 1, 2025 – What You Need to Know
All radio devices sold in the EU must meet new RED cybersecurity requirements by August 1, 2025. Learn what’s changing, who’s affected, and what to do if you miss the deadline.
The New RED Cybersecurity Deadline Is Approaching
From August 1, 2025, all radio equipment placed on the EU market must comply with the new cybersecurity requirements of the Radio Equipment Directive (RED) under Articles 3.3(d), 3.3(e), and 3.3(f).
Key Points:
- Compliance is mandatory for manufacturers, importers, and distributors
- EN 18031 is the harmonised standard for demonstrating compliance
- Affected products include IoT devices, wearables, connected toys, childcare products, and any device processing personal or financial data
What Happens If I Miss the August 2025 Deadline?
Can I still sell my radio devices in the EU if they don’t comply by August 1, 2025?
No. After this date, non-compliant products cannot be placed on the EU market. Products already on the market before the deadline may remain, but new stock must meet the new requirements.
What are the risks of missing the deadline?
Market Access Loss: Products placed on the market before August 1st can continue to be used without specific adaptations. However, any new products—or new batches of existing products—must be compliant with the new requirements. Placing non-compliant products on the market after the deadline is illegal and carries significant risks:
- Legal Penalties: Regulatory authorities may impose fines or sanctions.
- Reputation Damage: Non-compliance can harm your brand and customer trust.
- Increased Costs: Delays in certification can disrupt your supply chain and sales.
What should I do if I’m not ready?
Act fast
- Contact Applus+ Laboratories immediately for a gap analysis.
- Begin the EN 18031 assessment process as soon as possible.
- Prepare all required documentation and evidence for compliance.
How to Prepare for the Deadline
- Identify if your product is affected
- Perform a risk analysis assessment based on the product, its intended use and the applicability of RED DA (2022/30) Cybersecurity
- Conduct a gap analysis to assess current compliance status
- Implement necessary cybersecurity measures as per EN 18031
- Undergo official evaluation (self-assessment or Notified Body, as required)
- Update your Declaration of Conformity (DoC) and technical file
- Apply the CE marking and maintain compliance documentation
Don’t risk your market access.
Contact Applus+ Laboratories today to ensure your products are ready for the August 2025 RED cybersecurity deadline.