Cybersecurity in radio equipment: Regulation (EU) 2022/30

In a world where almost all of our devices are connected to the Internet, digital security is no longer optional. To protect European citizens, the European Commission approved the Delegated Regulation (EU) 2022/30, a regulation that strengthens the cybersecurity requirements for wireless devices (radio equipment) that we use every day.

This regulation complements the Radio Equipment Directive (RED). Its primary goal is to ensure that wirelessly connected products (such as smartphones, connected toys, or smartwatches) have built-in security barriers since their manufacture.

Key areas of protection

• Network Resilience: Prevent devices from damaging communication networks or being used for denial-of-service (DDoS) attacks.
• Privacy of the user: Ensure that personal data and the right to privacy are protected from unauthorized access.
• Prevention of fraud: Ensure that devices that manage payments or electronic money have robust measures to prevent fraudulent money transfers.

• Assessment of conformity: Products must be subjected to safety tests before they are placed on the market. If a device does not comply, it will not be able to carry the CE marking.
• Safe design: They must implement features such as data encryption, secure password management, and update systems that close detected vulnerabilities.
• Technical documentation: It is mandatory to update all the technical documentation to adapt to this regulation, detail how the device meets the cybersecurity requirements before the market surveillance authorities.

Note to the industry: Failure to comply with these rules will prevent the product from obtaining CE marking, which means that it cannot be legally sold on the European Union market