TÜV approved to test new EU cybersecurity rules

Certification company TÜV SÜD can now conduct conformity assessment for electronics companies seeking compliance with the EU’s Radio Equipment Directive (RED).

TÜV SÜD said its product service section has been registered in the EU’s NANDO database as a Notified Body for RED.

The RED rules, which apply to any radio equipment destined for the European market, were updated in January 2022 to include cyber security and data protection provisions.

The new provisions stipulate that every internet-enabled radio device must provide a certain level of protection to ensure network security, protect its users’ personal data and privacy and offer fraud protection.

The new requirements will become mandatory from August 2025. The RED rules apply to a broad range of smart electronics that connect to the internet from baby monitors to smart lighting systems.

NANDO, meanwhile, is short for New Approach Notified and Designated Organisations and is aimed at simplifying the registration and approval of new products. The associated database lists the EU Notified Bodies that are authorised to conduct conformity assessments in accordance with RED and other EU Directives.

“Manufacturers and companies aiming to place connected products falling under the Radio Equipment Directive on the EU market are urged to perform timely assessment of their new developments for conformity with the directive,” said Florian Wolff von Schutter, head of IT security for CIoT products at TÜV SÜD Product Service. “Starting from August 20252, all new products placed on the EU market must comply with the directive.”