What are the criteria for evaluating the applicability of any particular product for RED Cyber?

Answer

The applicability of RED Article 3.3 (d), (e), and (f) is determined by the capabilities and functions of the radio equipment. These criteria are used to evaluate whether these requirements apply:

  • RED Article 3.3 (d): This applies to radio equipment capable of establishing an Internet connection via an IP-based connection. The connection can be direct, indirect, temporary, or permanent.
  • RED Article 3.3 (e): This applies if the device processes personal, navigation, or location data. In such cases, data security and protection requirements come into effect. This applies if the radio equipment is capable of establishing an internet connection or if the device is childcare or wearable equipment.
  • RED Article 3.3 (f):This applies if the device processes virtual monetary data, requiring the equipment to meet specific security and integrity criteria related to financial transactions.
  • Other Considerations:
    - Component vs End-Product
    - Blank vs Preloaded Software
    - Development Platforms vs Deployable Devices

For more complex scenarios, a detailed risk assessment may be needed to justify any exemptions. It is recommended customers collaborate directly with a Notified Body or an accredited laboratory to evaluate compliance with EN 18031-X standards and determine the necessary compliance requirements for their end products.