Directive 2014/53/EU - OTC Bulgaria

NOTIFIED BODY WITH IDENTIFICATION NUMBER 2787

Certificate from NANDO

/red-nando.pdf

Authorization from DAMTN

/red-damtn.pdf

The procedure provides for the manufacturer to submit the device's technical documentation and relevant test reports to a notified body (OTC) for verification. Following a successfully conducted conformity assessment procedure against applicable standards, OTC issues an "EU Type-Examination Certificate." The manufacturer takes all necessary measures to ensure that the manufacturing process and its monitoring guarantee the conformity of the produced radio equipment with the approved type described in the EU type-examination certificate, and with the requirements of the Regulation applicable to them. Thus, the certified device can be placed on the market.

The manufacturer shall draw up a written EU declaration of conformity for each radio equipment type and shall keep it at the disposal of the competent authorities for 10 years after the radio equipment has been placed on the market.

In order to assist manufacturers of radio equipment in placing it on the market or making it available in the European Union, the European Commission has developed and maintains a dedicated web page related to the RED Directive.

OTC is a member of REDCA - the Radio Equipment Directive Compliance Association.

Conformity assessment of Radio Equipment is a confirmation that:

  • they are safe;
  • they do not generate unacceptable electromagnetic interference;
  • they have the expected level of immunity to electromagnetic interference;
  • they effectively use and, at the same time, support the efficient use of the radio spectrum.
Satelite Image

A New Era for Radio Equipment: Cybersecurity, Personal Data, and Fraud Protection under the RED Directive from August 2025

Radio equipment manufacturers, get ready! Significant changes to European legislation will come into force on August 1, 2025, transforming your understanding of conformity assessment and market placement. The European Commission, through Delegated Regulation (EU) 2022/30, supplements Directive 2014/53/EU (Radio Equipment Directive – RED) by introducing strict new requirements for cybersecurity, personal data protection, and fraud prevention. The goal is clear: to ensure that all radio equipment placed on the EU market is not only safe but also secure in an increasingly connected digital world.


Why are these new RED requirements necessary?

In the era of 5G networks and the rapid expansion of connected devices (IoT devices), risks related to cybersecurity are growing exponentially. The European Union is taking proactive measures to protect consumers, networks, and data from potential threats. This regulation is a direct response to these challenges, providing a harmonized approach to protection against cyberattacks, unauthorized access to personal data, and fraudulent activities that can be facilitated by vulnerable radio equipment.

Image: Cybersecurity and IoT device protection.

What are the new "essential requirements" under the RED Directive?

Delegated Regulation (EU) 2022/30 expands the scope of the essential requirements specified in Article 3, paragraph 3 of Directive 2014/53/EU. Here's what they include:

Image: Protection of personal data and financial transactions.

Which products are directly affected by the new requirements?

These new requirements concern a wide range of radio equipment that can be connected to the internet or process sensitive data:

Image: Variety of IoT devices.

Are there any exceptions? When do the new requirements NOT apply?

Yes, there are! If your radio equipment is already covered by other specific European legislative acts that address aspects of security, data, or fraud, it may be excluded from some or all of the new RED requirements. This includes products regulated by:

Image: Medical device that may be an exception.

What should you do as a manufacturer?

The approaching deadline of August 1, 2025 means you need to act now! Here are the main steps:

  1. Design Review and Reassessment: All affected radio equipment must be reviewed at the design stage to ensure that their hardware and software components are resilient to cyber threats and protect personal data.
  2. Additional Tests: Specific tests will be required to demonstrate compliance with the new requirements for cybersecurity, data protection, and fraud prevention.
  3. Update Technical Documentation: Your technical file must be updated to include evidence of compliance with the new essential requirements.
  4. Update EU Declaration of Conformity (DoC): Your DoC must reflect compliance with the new provisions of Article 3, paragraph 3, points (ia), (ib), and (ic).
  5. Mandatory cooperation with a Notified Body: If harmonized standards covering these new requirements have not yet been developed or fully applied, the involvement of a Notified Body (such as OTC Bulgaria, with identification number 2787) will be mandatory for conducting the conformity assessment. We are here to help you!
Image: Certification and documentation process.

Don't delay! The deadline is August 1, 2025!

Time is flying, and compliance with the new requirements is crucial for the smooth placement of your radio equipment on the European market. Products that do not comply with these regulations after August 1, 2025, will not be able to be sold in the European Union.

Image: Symbol of RED Directive deadline.

OTC Bulgaria is your reliable partner in this process. As a Notified Body 2787 and a member of REDCA, we have the expertise and experience to help you navigate these new challenges and ensure the full compliance of your products.

Contact us today to discuss how we can assist you and ensure the smooth certification of your radio equipment!

Download product certification request (RED)