RED Cybersecurity RequirementsFOR CONSUMER IoT DEVICES

NAVIGATING THE RED CYBERSECURITY REQUIREMENTS

Time is ticking for manufacturers to make sure their devices comply with the Radio Equipment Directive (RED) cybersecurity requirements before the August 1st, 2025 deadline. If manufacturers do not achieve compliance with RED before August 1st, 2025, they will be forced to take their non-compliant products off the shelves, leading to potential market disruptions and financial losses. With the typical turnaround time for the RED compliance process ranging from 6 to 9 months, it is crucial to start preparing now to avoid these consequences.

The European Commission has announced that the application of the Radio Equipment Directive (RED) cybersecurity requirements will be extended to August 1st, 2025. This means that any devices in the scope of the RED Delegated Act will need to be compliant when placed into the European market after August 1, 2025.

At Bureau Veritas, we understand the challenges and complexities of meeting these evolving cybersecurity standards. Our comprehensive compliance solutions are designed to help you navigate the regulatory landscape and prepare your devices for the upcoming RED requirements.

Understanding the RED Cybersecurity Requirements

As a leading provider of testing, inspection, and certification services, Bureau Veritas offers a comprehensive range of solutions to help you meet the RED cybersecurity requirements:

1. Gap Analysis and Consultation
· Our specialists review your product design, documentation, and processes to identify potential gaps and areas for improvement.
· We provide detailed recommendations and guidance to align your devices with the RED cybersecurity provisions.

2. Testing and Validation
· Our state-of-the-art laboratories are equipped to perform rigorous testing and validation of your IoT devices against the RED requirements.
· We assess various aspects, such as secure communication, data protection, software updates, and resilience against cyber threats.
· Additional testing areas include:

· Password complexity: We evaluate the strength and robustness of password requirements for your IoT devices.
· Communication channel traffic (Radio Test): Our experts conduct thorough radio testing to ensure secure communication channels and protect against unauthorized access.
· Interface security: We assess the security of all interfaces to identify and address potential vulnerabilities.
· PCB security: Our team examines the physical security of printed circuit boards (PCBs) to prevent tampering and unauthorized modifications.

3. Certification and Regulatory Support
· Bureau Veritas is accredited to provide certification services for the RED, ensuring your devices meet the necessary cybersecurity standards.
· Our team stays up-to-date with the latest regulatory developments and can guide you through the certification process, helping you achieve compliance efficiently.

Devices Covered by the RED Cybersecurity Requirements

The RED cybersecurity requirements apply to a wide range of consumer IoT devices that use radio technology for communication over the internet. Some examples of devices that fall under the scope of these regulations include:

1. Communication Devices
· Mobile phones
· Tablets
· Electronic cameras
· Telecommunication equipment

2 IoT-Connected Devices
· Smart home appliances (e.g., refrigerators, thermostats, lighting systems)
· Connected toys and childcare equipment (e.g., baby monitors)
· Wearable devices (e.g., smartwatches, fitness trackers)
· Connected industrial devices

3. Other Radio Equipment
· Wireless routers and access points
· Bluetooth devices
· Wi-Fi enabled products

The Bureau Veritas Advantage

Global Presence

With testing facilities in key markets like Germany, France, China, and Taiwan, we offer local support and expertise wherever your manufacturing operations are based.
Simplified Process

Our workshop-based approach and comprehensive test plans streamline your compliance journey, ensuring all necessary aspects are covered.
Your Technical Partner

Our team with deep expertise in IoT cybersecurity acts as your partner, providing guidance and support to navigate cybersecurity challenges.
INTEGRATED RADIO AND CYBERSECURITY TESTING

We offer both radio performance and cybersecurity testing, providing a convenient, one-stop solution for your compliance needs.

Get in touchwith us

First name

Last name

Email

Phone

Company

Country / Territory

How can we help you?

Would you like to receive marketing communication from Bureau Veritas?

Yes

No

INFORMATION NOTICE TO DATA SUBJECTS
Your personal data are collected by Bureau Veritas Consumer Products Services Division (“BVCPS”), through its entity Bureau Veritas Hong Kong Limited (having its registered office at 1/F, Pacific Trade Centre, 2 Kai Hing Road, Kowloon Bay, Kowloon, Hong Kong), as well as the BVCPS affiliate(s) with which you had, have or will have a business relationship or that otherwise decide(s) which of your personal data is collected and how it is used.  A list of BVCPS affiliates is available at: BVCPS Locations (https://www.cps.bureauveritas.com/sites/g/files/zypfnx236/files/media/document/BVCPS%20Locations_20210611_for%20web.pdf)
Your personal data are subject to computer processing in order to respond to your requests and to provide you with additional information about BVCPS services, events or topics that may be of interest to you on the basis of your consent to the processing of your personal data for that purpose (by checking the box below).
Your personal data are intended for use by the relevant business departments of BVCPS and/or their service providers depending on the nature of your requests, as well as by BVCPS IT department.    Your personal data will be retained until the earlier of (a) one year after the last communication, or (b) your request to delete the personal data. 
Your personal data may be transferred outside the European Union, on the basis of your explicit consent, as the data subject, to the proposed transfer. By checking the box below, you are providing your explicit consent to the proposed transfer, with your acknowledgement of the possible risks of such transfer due to the absence of an adequacy decision pursuant to Article 45 of the General Data Protection Regulation of 27 April 2016 or of appropriate safeguards pursuant to Article 46 of the General Data Protection Regulation of 27 April 2016.
In accordance with the French Data Protection Act of 6 January 1978 as amended and the General Data Protection Regulation of 27 April 2016, you may have the right to access, rectify and erase any personal data concerning you, as well as the right to limit the processing, the right to oppose to the processing or the right to portability of your personal data. You have the right to withdraw your consent at any time by connecting to the site or application (https://personaldataprotection.bureauveritas.com). and unchecking the box dedicated to the collection of your consent. You also have the right to set out general and specific guidelines that define how you intend these rights to be exercised after your death. You can exercise your rights by e-mail at the following address: https://personaldataprotection.bureauveritas.com. Finally, you have a right to lodge a complaint to the Commission Nationale Informatique et Libertés (CNIL) or the relevant authorities in your country.
Fields marked with an asterisk must be filled in. Otherwise, BVCPS would not be able to respond to your requests and/or provide you with additional information.

RED Cybersecurity RequirementsFOR CONSUMER IoT DEVICES

NAVIGATING THE RED CYBERSECURITY REQUIREMENTS

Understanding the RED Cybersecurity Requirements

Devices Covered by the RED Cybersecurity Requirements

The Bureau Veritas Advantage

Global Presence

Simplified Process

Your Technical Partner

INTEGRATED RADIO AND CYBERSECURITY TESTING

RED Cybersecurity Requirements
FOR CONSUMER IoT DEVICES