The CRA's 24-hour reporting duty has applied since 11 September 2026. Check whether it reaches you

Do the radio equipment cybersecurity requirements reach you?

Ten answers, read by the same determination our portal runs. The requirements bind equipment placed on the market from 1 August 2025, and the act that switched them on is repealed from 11 December 2027.

Which requirements reach your equipment, and as what?

Ten answers, read by the same determination the portal runs. Nothing you pick is sent or stored.

The equipment

Is the product radio equipment under Directive 2014/53/EU?

Article 3(3) of the Radio Equipment Directive only reaches radio equipment. If the product is not radio equipment, nothing here applies to it, and the Cyber Resilience Act may reach it instead.

Answer the questions above and the reading appears here, with the provisions it rests on.

The requirements, in the Official Journal's words

  • 3(3)(d)Do not harm the network or misuse its resources
  • 3(3)(e)Build in safeguards for personal data and privacy
  • 3(3)(f)Support features that protect against fraud

The hand-off is deliberate. The Commission says Annex I to that Regulation already covers all the elements of points (d), (e) and (f). So the repeal stops one product being held to both.

Questions about this page

What happens to the answers?

They stay in the page. The reading is computed in your browser, and nothing is sent or stored.

Do we need an account to read it?

No. The determination is free and open, with the articles named so you can check each one. An account is for running the system that keeps the answer current.

Is this legal advice?

No. It is the instrument's own scope rules read against your answers, from the catalogue our portal seeds.

Free tools