RED Guide update - 2026

2026 Update to the
"Guide to the Radio Equipment Directive 2014/53/EU"

• Original Edition: 19 May 2017
  
  
• First Major Revision: 19 December 2018 
  
  
• Latest Comprehensive Revision: 2026 (Updated to provide practical guidance and consensus interpretations following the application of RED Article 3(3)(d), (e), and (f) cybersecurity requirements that became mandatory on 1 August 2025).
  
  
• Supplementary Guidance: RED AdCo published additional cybersecurity guidance on 11 February 2026 to support compliance with the RED cybersecurity Delegated Regulation.

Key updates highlighted in the 2026 RED Guide include:

1. Cybersecurity Realignment (Regulation (EU) 2026/339)

The most significant regulatory development is the alignment of RED cybersecurity provisions with the Cyber Resilience Act (CRA).

• On 16 February 2026, the European Commission adopted Commission Delegated Regulation (EU) 2026/339, repealing Delegated Regulation (EU) 2022/30. [eur-lex.europa.eu]

• The purpose is to prevent overlapping cybersecurity requirements between RED and the CRA. [eur-lex.europa.eu], [webgate.ec.europa.eu]

• The repeal takes effect on 11 December 2027, the date on which the CRA becomes fully applicable. Until 11 December 2027, radio equipment within the scope of Delegated Regulation (EU) 2022/30 must continue to comply with the RED cybersecurity requirements under Article 3(3)(d), (e), and (f). [eur-lex.europa.eu]

2. Update on Reconfigurable Radio Systems

The Commission's earlier work on software-reconfigurable radio systems remains under consideration. Cybersecurity-related aspects originally considered under the initiative have largely been addressed through the CRA framework, helping to avoid duplication between RED and horizontal cybersecurity legislation. 

3. Compliance and Market Surveillance Clarifications

• Where a RED conformity assessment procedure requires third-party involvement, only certificates or opinions issued by a designated RED Notified Body satisfy that requirement. Supporting test reports from other organizations may still form part of the technical documentation. [redca.eu], [single-mar....europa.eu]

• The Common Charger initiative continues to progress under the RED framework, extending USB Type-C charging requirements to additional product categories, including laptops within scope.

REF:

RED Guide (2026)

[eur-lex.europa.eu]

[redca.eu] 

[single-mar....europa.eu]

ACCREDITATION BODIES FOR THE U.S. CYBER TRUST MARK PROGRAM

WASHINGTON (September 28, 2026)

PUBLIC SAFETY AND HOMELAND SECURITY BUREAU RECOGNIZES ACCREDITATION BODIES FOR THE U.S. CYBER TRUST MARK PROGRAM - Public Notice

The Bureau finds that the following entities have demonstrated they have the credentials, qualifications, and competence in assessing CLAs and  CyberLABs that perform assessments and testing in support of the USCTM Program:

American Association for Laboratory Accreditation’s (A2LA)

ANSI National Accreditation Board (ANAB)

REF:

Action by: Chief, Public Safety and Homeland Security Bureau. DA-26-1029A1.docx DA-26-1029A1.pdf DA-26-1029A1.txt

FCC adopts measures encouraging reciprocity in testing and certification

WASHINGTON (May 15, 2026) — In a major move to fortify national security and protect the integrity of the U.S. communications infrastructure, the Federal Communications Commission (FCC) has finalized a "Second Report and Order" (Rule 2026-09822) that overhauls how electronic devices are tested and certified for the American market.

The new rules aim to eliminate vulnerabilities in the equipment authorization process, particularly those stemming from foreign influence and non-reciprocal international trade practices.

Key Requirements

• "Trusted Test Lab" Fast-Track: The FCC is establishing a priority review process for devices tested in "Trusted Test Labs." To qualify as "trusted," a lab must be located in the United States or in a country that has a Mutual Recognition Agreement (MRA) or a comparable reciprocal trade agreement with the U.S.
• Foreign Employee Disclosure: Telecommunications Certification Bodies (TCBs) and test labs are now required to report the number and location of employees involved in the testing and certification of equipment, including those outside the United States. This measure is intended to increase transparency regarding who is handling sensitive technical data.
• Prohibited Entity Screening: The order directs the creation of a consolidated, machine-readable list of prohibited entities. TCBs must use this list to screen applicants more efficiently to ensure no equipment from sanctioned or "covered" entities receives FCC authorization.
• Enhanced Surveillance: The FCC is updating its post-market surveillance procedures, giving the agency more teeth to enforce compliance after a product has hit the shelves.

Implications for Industry

• Geopolitical Shift in Testing: By incentivizing "Trusted Test Labs," the FCC is effectively pushing manufacturers away from labs in countries—most notably China—that do not offer reciprocal recognition to U.S. labs. This is expected to cause a significant shift in where global electronics firms conduct their FCC compliance testing.
• Streamlined Compliance for Allies: Manufacturers using U.S.-based or MRA-partner labs will benefit from shorter "Pre-Approval Guidance" (PAG) wait times, potentially speeding up time-to-market for new technologies like 6G and advanced IoT devices.
• Increased Oversight for TCBs: Certification bodies face stricter reporting standards and the threat of lost recognition if they fail to properly vet applicants against the new prohibited entity list.

Why It Matters

The equipment authorization program is the "gatekeeper" for all wireless devices sold in the U.S. Historically, the FCC allowed testing in any recognized lab worldwide. However, the Commission noted that this openness created national security risks, as some labs might be subject to the influence of foreign adversaries.

"This action allows the Commission to promote a robust domestic and allied testing ecosystem," the FCC stated in the order. "It safeguards U.S. communications networks and upholds the integrity of the equipment authorization process."

Effective Date: The final rule is scheduled to take effect on June 15, 2026, though certain reporting requirements involving information collection may face a slight delay pending administrative approval.

REF:

ETDocket No. 24-136

FederalRegister Vol. 91, No. 94 / Friday May 15, 2026

FCC Moves to Tighten Security: New Rules Target Foreign Testing Labs

WASHINGTON (April 30, 2026) — The Federal Communications Commission (FCC) today took significant steps to overhaul the way electronic devices are vetted for the American market. In a unanimous vote, the Commission launched a new rule-making process that would ban the use of testing labs located in countries that refuse to recognize U.S. testing labs.

The move marks a return to a "reciprocity-first" policy, aimed at bolstering national security and ensuring a level playing field for American laboratories.

---

Restoring Reciprocity and Security

The proposed rules aim to close a loophole that has existed since 2015. Historically, the FCC only recognized test labs in countries that had Mutual Recognition Agreements (MRAs) with the United States. Today’s proposal seeks to restore this requirement, phasing out labs in non-reciprocal countries over a two-year period once the rules are finalized.

"Today’s actions help ensure integrity, security, and reciprocity in electronic device testing,"

The FCC stated, noting that the goal is to strengthen oversight and prevent foreign adversaries from compromising the equipment authorization process.

A "Fast-Track" for Trusted Labs

To balance security with efficiency, the FCC also adopted an Order to streamline approvals for "trusted" sources. Highlights include:

• Priority Review: Devices tested in U.S.-based labs or reciprocal international locations will now qualify for a fast-track approval process.
• Increased Transparency: Labs must now disclose their exact locations and the number of employees involved in FCC-recognized testing.
• Enhanced Surveillance: The FCC is strengthening post-market checks and creating confidential "whistleblower" channels for industry members to report security threats or violations. 

---

Crackdown on "Bad Labs"

This decision builds on momentum from 2025, when the FCC began prohibiting labs owned or controlled by foreign adversaries. Since that policy shift, the Commission has already stripped 23 "Bad Labs" of their recognition, citing direct threats to U.S. national security.

What’s Next?

The Notice of Proposed Rule-making (NPRM) is now open for public comment. The action was approved by Chairman Carr and Commissioners Gomez and Trusty, signaling a unified front on prioritizing the integrity of the U.S. communications supply chain.

Feature	New Policy
Non-Reciprocal Labs	Proposed 2-year phase-out
U.S. & MRA Labs	Fast-track priority review
Reporting	New confidential channels for security concerns
Enforcement	Stronger post-market surveillance

 

REF 

FCC 26-28 Action "Fact Sheet"

FCC press release

 

FCC Bans New Foreign-Made Consumer Routers, Citing "Unacceptable" National Security Risks

WASHINGTON, March 23, 2026 — The Federal Communications Commission (FCC) has officially added consumer-grade routers produced in foreign countries to its "Covered List." The move effectively bans the authorization of any new foreign-made router models for import, marketing, or sale within the United States.

The ruling follows a National Security Determination issued on March 20, 2026, by a White House-convened inter-agency body. The group concluded that routers produced abroad pose a severe threat to U.S. infrastructure and the safety of American citizens.

The "Security Gap": Why the FCC Acted

The FCC cited a growing pattern of cyberattacks that specifically exploit vulnerabilities in home and small office routers. Key findings include:

• Infrastructure Targets: Foreign-made routers were directly implicated in the Volt, Flax, and Salt Typhoon cyberattacks, which targeted American energy, water, and transportation systems.
• The "Attack Vector of Choice": Malicious actors are increasingly using these devices to create massive botnets and conduct "password spray" attacks against high-value targets.
• Supply Chain Vulnerabilities: Officials warned that reliance on foreign production introduces backdoors that could be leveraged to disrupt the U.S. economy and national defense.

What This Means for Consumers

The ruling is designed to phase out foreign hardware without disrupting current users.

• No Impact on Current Devices: This ban does not apply to routers you already own or models that received FCC approval prior to March 23, 2026.
• Continued Retail Sales: Stores can continue to sell existing inventory of previously authorized models.
• Waiver for Security Updates: In a separate move (DA 26-286), the FCC granted a limited waiver until March 1, 2027. This ensures that all routers currently in use—even those now on the "Covered List"—can still receive critical software and firmware patches to protect users from emerging threats.

The New Standard: "Conditional Approval" and On-shoring

To continue selling new models in the U.S., manufacturers must now navigate a rigorous "Conditional Approval" process managed by the Department of War (DoW) or Department of Homeland Security (DHS).

To qualify for an exemption, companies must provide:

1. Detailed On-shoring Plans: A time-bound strategy to move or expand manufacturing and assembly within the United States.
2. Quarterly Progress Reports: Ongoing updates to federal agencies on the status of their U.S. manufacturing facilities.
3. Capital Investment Proof: Documentation of financing and investment dedicated to U.S.-based production over the next 1–5 years.

Industry Impact

The scope of the ruling is broad. While China accounts for roughly 60% of the U.S. router market, the ban applies to any foreign country. This includes major hubs like Taiwan, Vietnam, and Thailand, affecting nearly every major brand, including Netgear, Amazon (Eero), Google (Nest Wifi), TP-Link, and Asus.

---

 "Routers are the boxes in every home that connect us to the internet. We must ensure these critical gateways are not providing foreign actors with a built-in backdoor to American lives." — FCC Fact Sheet Summary

---

Quick Reference:

• Is my current router banned? No.
• Can I still buy a router today? Yes, existing models are still legal to sell.
• Will prices go up? Analysts expect potential price increases as manufacturers shift production to the U.S.

How do I know if a new model is safe? Look for the FCC ID; moving forward, any new model authorized will have passed the new federal security and on-shoring requirements.

 

REF:

Public Notice 

FCC FAQ 

FCC Updates Covered List 

 

FCC Cracks Down on 'Untrustworthy Gear,' Bans Previously Authorized Devices Tied to Foreign Adversaries

 

WASHINGTON, D.C. – October 28, 2025 – The Federal Communications Commission (FCC) today voted to approve sweeping new rules aimed at bolstering the security of U.S. communications networks and closing key loopholes in the agency's Covered List. The action, according to the FCC, will help secure America's supply chain against devices that pose an unacceptable national security risk, particularly those tied to foreign adversaries like China.

The agency's primary goal is to prevent foreign adversaries from using these devices to surveil Americans, disrupt networks, and otherwise threaten U.S. national security.

---

Key New Safeguards Approved

The new rules clarify and strengthen existing prohibitions on covered equipment, specifically targeting two major areas where previous regulations fell short:

1. Banning Previously Authorized Devices

While the FCC's rules already prohibit the importation, sale, and marketing of new insecure devices from entities like Huawei and Hikvision , those rules did not apply to equipment that was previously authorized.

The new rules establish a process for the FCC to prohibit the continued importation, marketing, and sale of devices that were authorized before the agency placed them on the Covered List due to national security concerns. The FCC stated it will apply this new rule in a targeted manner.

2. Closing the Modular Transmitter Loophole

The Commission also voted to close the "modular transmitter loophole”. This prevents certain insecure modular transmitters—like those from Covered List entities such as Huawei and Hikvision—from being included as component parts within devices that are otherwise lawful or authorized.

---

Future Actions Under Consideration

In addition to the immediate rule changes, the Commission adopted a Further Notice of Proposed Rulemaking (FNPRM). This notice seeks public comment on various measures to further secure the supply chain and strengthen enforcement, including:

• Extending Prohibitions: Extending equipment authorization prohibitions to a larger class of foreign adversary-controlled devices and component parts produced by Covered List entities.
• Strengthening Enforcement: Various measures to strengthen enforcement against the unlawful marketing of covered equipment 

REF:

News Release from the FCC
https://docs.fcc.gov/public/attachments/DOC-415131A1.pdf

 

U.S. FCC Begins Proceedings to Strip Recognition from Chinese-Controlled Labs

WASHINGTON D.C. September. 8, 2025 — The Federal Communications Commission (FCC) has initiated its first enforcement action under newly effective rules targeting "bad labs" owned or controlled by foreign adversary nations. The agency has begun proceedings to withdraw recognition from seven electronics testing labs and has denied renewal requests for others with expired recognition. All the labs are identified as being controlled by the Chinese government.

This action is a direct result of new rules adopted by the FCC in May, which prohibit recognition for labs that test devices for the U.S. market but are subject to the control of a foreign adversary government.

The labs affected by this action are:

Labs Subject to Withdrawal Proceedings:

• China Academy of Information and Communications Technology (CAICT)
• Chongqing Academy of Information and Communications
• TUV Rheinland-CCIC Ningbo Co. Ltd.
• UL-CCIC
• CQC Internet of Vehicles Technical Service Co. Ltd.
• CVC Testing
• CVC Testing Shenzhen

Labs with Expired or Denied Recognition:

• Shanghai Institute of Measurement and Testing Technology (SIMT)
• CCIC Southern Testing Co., Ltd.
• CESI (Guangzhou) Standards

A press release from the Commission emphasized the importance of the move, stating, "Foreign adversary governments should not own and control the labs that test the devices the FCC certifies as safe for the U.S. market. This is an important step in restoring trust in the Commission’s equipment authorization process and combating foreign adversary threats."

REF:

News Release from the FCC
https://docs.fcc.gov/public/attachments/DOC-414369A1.pdf