RED Guide update - 2026

2026 Update to the
"Guide to the Radio Equipment Directive 2014/53/EU"

• Original Edition: 19 May 2017
  
  
• First Major Revision: 19 December 2018 
  
  
• Latest Comprehensive Revision: 2026 (Updated to provide practical guidance and consensus interpretations following the application of RED Article 3(3)(d), (e), and (f) cybersecurity requirements that became mandatory on 1 August 2025).
  
  
• Supplementary Guidance: RED AdCo published additional cybersecurity guidance on 11 February 2026 to support compliance with the RED cybersecurity Delegated Regulation.

Key updates highlighted in the 2026 RED Guide include:

1. Cybersecurity Realignment (Regulation (EU) 2026/339)

The most significant regulatory development is the alignment of RED cybersecurity provisions with the Cyber Resilience Act (CRA).

• On 16 February 2026, the European Commission adopted Commission Delegated Regulation (EU) 2026/339, repealing Delegated Regulation (EU) 2022/30. [eur-lex.europa.eu]

• The purpose is to prevent overlapping cybersecurity requirements between RED and the CRA. [eur-lex.europa.eu], [webgate.ec.europa.eu]

• The repeal takes effect on 11 December 2027, the date on which the CRA becomes fully applicable. Until 11 December 2027, radio equipment within the scope of Delegated Regulation (EU) 2022/30 must continue to comply with the RED cybersecurity requirements under Article 3(3)(d), (e), and (f). [eur-lex.europa.eu]

2. Update on Reconfigurable Radio Systems

The Commission's earlier work on software-reconfigurable radio systems remains under consideration. Cybersecurity-related aspects originally considered under the initiative have largely been addressed through the CRA framework, helping to avoid duplication between RED and horizontal cybersecurity legislation. 

3. Compliance and Market Surveillance Clarifications

• Where a RED conformity assessment procedure requires third-party involvement, only certificates or opinions issued by a designated RED Notified Body satisfy that requirement. Supporting test reports from other organizations may still form part of the technical documentation. [redca.eu], [single-mar....europa.eu]

• The Common Charger initiative continues to progress under the RED framework, extending USB Type-C charging requirements to additional product categories, including laptops within scope.

REF:

RED Guide (2026)

[eur-lex.europa.eu]

[redca.eu] 

[single-mar....europa.eu]

Europe Radio Equipment Cybersecurity update

On January 30, 2025, EN 18031-1, -2 and -3 were listed in the Official Journal of the European Union thus now harmonized to give "presumption of conformity" with the essential requirements set out under articles 3.3 d, e, and f, of the Radio Equipment Directive, however with some conditions and limitations.

These standards where originally released on September 2, 2024.

EN 18031-1:2024 (Common security requirements for radio equipment - Part 1: Internet connected radio equipment)

EN 18031-2:2024 (Common security requirements for radio equipment - Part 2: radio equipment processing data, namely Internet connected radio equipment, childcare radio equipment, toys radio equipment and wearable radio equipment)

EN 18031-3:2024 (Common security requirements for radio equipment - Part 3: Internet connected radio equipment processing virtual money or monetary value)

It's important to note that these are framework standards defining common security requirements and assessment methods, not test standards.

 REF:

 Commission Delegated Regulation (EU) 2022/30

Document 32025D0138 

 

FCC Empowers Short-Range Radars in the 60 GHz Band

July 24, 2023 – From the U.S. Federal Communications Commission, amending 47 CFR Part 15. 

Published today and effective August 23, 2023. Part 15 of the Commission rules amended to provide new opportunities for unlicensed field disturbance sensor (FDS) devices (e.g., radars) to operate in the 57–71 GHz band (60 GHz band)

 

REF:

https://www.govinfo.gov/content/pkg/FR-2023-07-24/pdf/2023-15367.pdf 

C-V2X - RSS-252 issue 2 consultation - Intelligent Transportation Systems

ISED Canada seeking comments on the consultation of RSS-252 issue 2, Draft 1, May 2023 regarding ‘Intelligent Transportation Systems’ (ITS) On-Board Units (OBUs) in the 5895 – 5925 MHz Band’

The standard sets out requirements for equipment certification of license-exempt Cellular Vehicle-to-Everything (C-V2X) radio equipment within the 5895 to 5925 MHz frequency band.

RSS-252 Issue 2 constitutes a completely re-written standard replacing the entirety of RSS-252 Issue 1. Issue 1 of the standard, deprecated as of April 1, 2023, at which time ISED would no longer accept applications for certification under RSS-252 until a new issue is published, effectively rescinding ITS designation in the 5850 to 5895 MHz band.

Highlights;

• RSS-Gen compliance required
• References 3GPP Specification 21.914, Release 14 (or newer releases containing C-V2X)
• Average e.i.r.p. for C-V2X OBU shall not exceed 2W (33dBm)
• Unwanted emissions -29,-35,-43,-53 dBm/100 kHz @ band edge +1,+10,+20, >20 MHz
  
• Applicable measurement standard is ANSI C63.26  

RSS-252, Issue 2 will be in force as of the date of its publication on Canada's ISED website.

Comments are due no later than July 28, 2023
Update (July 27, 2023 -ISED has extended the comment period until August 11, 2023)

REF:

RSS-252 Issue 2

Decision the Technical and Policy Framework for Radio Local Area Network Devices in the 5850-5895 MHz Band and for Intelligent Transportation Systems in the5895-5925 MHz Band.

 

New European Union "Blue Guide" published

 

A new version of the "Blue Guide" on the implementation of EU product rules has been published.

This new version builds on past editions while also reflecting recent changes in EU legislation, in particular, the adoption of new regulations on market surveillance. 

REF:

https://bit.ly/EU-Blue-Guide

United Kingdom Conformity Assessment Mark (UKCA) deferred

The UK government announced August 24, 2021 that you may continue to use the CE marking for goods place on the market in Great Britain until January 2023. The UKCA marking may be used now, however, from January 1, 2023 the UKCA marking will be mandatory. 

REF:

https://www.gov.uk/guidance/placing-manufactured-goods-on-the-market-in-great-britain 

Cybersecurity risks bring new European regulations

 Cybersecurity risks to personal privacy, fraud, and the security of the open internet are of paramount concern for our interconnected, digitally dependent world, and the European Union is among the first economies to enact wide-reaching legislation to address the growing concerns of cybersecurity risks. 

Significant changes are coming concerning regulations and requirements for equipment covered by the EU Radio Equipment Directive (RED 2014/53/EU). To say significant may be an understatement. In today’s connected world virtually all personal electronics we use today are impacted by the changes coming one way or another, and most of them on the market would not meet these higher standards today.

Breakdown of the new requirements

1. New delegated regulation and activation of additional Radio Equipment Directive essential requirements for certain categories or classes of specific types of radio equipment.
1. Covering aspects of cybersecurity and internet-connected radio equipment, key points on the essential requirements are addressed.
1. Protection from harm to the network - Art 3.3(d)
2. protection of personal data, the privacy of users and subscribers - Art 3.3(e)
3. protection from fraud- Art 3.3(f)
2. Applicable to new categories or classes of equipment which are;
1. All Internet-connected radio equipment
2. Childcare radio equipment (internet-connected or not)
3. Toys with radio functionality (internet-connected or not)
4. Wearable electronics (internet-connected or not)
3. Internet-connected means capable of communication over the internet, directly or indirectly such as using an intermediary, an example of which is a cell phone.
4. Specific medical radio equipment and in vitro diagnostic medical devices falling under regulations (EU) 2017/745 and (EU) 2017/746 respectively, already have requirements to address these elements of cybersecurity and therefore are excluded from these new Radio Equipment Directive categories or classes.
5. Regulations related to Vehicles, Civil Aviation, and electronic road toll systems address some elements of cybersecurity related to Art 3.3(e) and Art 3.3(f) and are therefore excluded from the Radio Equipment Directives requirements on these aspects.
2. The exact technical requirements for compliance with these essential requirements are not defined at this time. The European Committee for Standardization (CEN), The European Committee for Electrotechnical Standardization (CENELEC), and the European Telecommunications Standards Institute (ETSI) shall prepare a work program indicating the standards and a timetable for implementation. A draft is expected 2 months after notification of the delegated regulation.
3. The new regulations shall apply 30 months after entry into force which is estimated to be around April 2024

Instructions for US Stakeholders wishing to submit comments on these new requirements

How to Comment  

Please limit comments to the draft Delegated Act only.

REF:

Draft Delegated Act