{"id":72529,"date":"2025-09-02T14:37:19","date_gmt":"2025-09-02T12:37:19","guid":{"rendered":"https:\/\/fhi.nl\/nieuws\/red-3-3-essential-cybersecurity-requirements-for-radio-equipment\/"},"modified":"2025-09-02T14:37:19","modified_gmt":"2025-09-02T12:37:19","slug":"red-3-3-essential-cybersecurity-requirements-for-radio-equipment","status":"publish","type":"news","link":"https:\/\/fhi.nl\/en\/news\/red-3-3-essential-cybersecurity-requirements-for-radio-equipment\/","title":{"rendered":"RED 3.3: Essential Cybersecurity Requirements for Radio Equipment"},"content":{"rendered":"
\n\n\t\n\t\t\t
<\/div>\n\t\n\t
\n\t\t
\n\t\t\t
\n\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t

\n\t\t\t\t\tRED 3.3: Essential Cybersecurity Requirements for Radio Equipment\t\t\t\t<\/h1>\n\n\t\t\t\t
\n\t\t\t\t\t<\/svg>\t\t\t\t<\/div>\n\n\t\t\t\t\n\t\t\t\t\n\t\t\t<\/div>\n\n\t\t\t\n\t\t<\/div>\n\t<\/div>\n<\/header>\n\n\n\n
\n\t
\n\t\t\t\t\t\t\t\t\t\t\t
\n\t\t\t
<\/div>
\n
\n\t

As of August 1, 2025, the Radio Equipment Directive (RED) Articles 3.3(d), 3.3(e) and 3.3(f)<\/strong> have been activated, introducing mandatory cybersecurity requirements for radio equipment placed on the EU market. For embedded developers and manufacturers of connected devices, these regulations represent a critical compliance milestone that cannot be ignored.<\/p>\n

Understanding RED 3.3<\/h4>\n

The radio equipment directive 2014\/53\/EU (RED)<\/strong> establishes a regulatory framework for placing radio equipment on the market. It ensures a single market for radio equipment by setting essential requirements for safety and health, electromagnetic compatibility, and the efficient use of the radio spectrum. The newly activated Article 3.3<\/strong> provisions specifically address cybersecurity concerns for internet-connected radio equipment.<\/p>\n

Key Requirements<\/h4>\n

The three essential cybersecurity requirements under RED 3.3 are:<\/p>\n

Article 3.3(d): Network Protection<\/strong> Radio equipment that can communicate over the internet, either directly or via any other equipment must not harm networks or cause unacceptable service degradation by misusing network resources.<\/p>\n

Article 3.3(e): Personal Data Protection<\/strong> Equipment capable of processing personal, traffic or location data, excluding radio equipment designed or intended exclusively for childcare, equipment covered under the Toys Directive (2009\/48\/EC)<\/strong> and radio equipment designed or intended to be worn on, strapped to or hung from the body or clothing must include safeguards to protect user privacy and personal data.<\/p>\n

Article 3.3(f): Fraud Prevention<\/strong> Internet connected radio equipment<\/strong> that enables the holder or user to transfer money, monetary value or virtual currency must support capabilities that ensure protection against fraud.<\/p>\n

Affected Products<\/h4>\n

RED 3.3 applies to a wide range of connected devices including:<\/p>\n