The CRA applies to the categories of radio equipment in scope of the Delegated Regulation (EU) 2022/30 adopted under the Radio Equipment Directive 2014/53/EU (‘RED Delegated Regulation’). The CRA covers the essential requirements of the RED on Cybersecurity, which were rendered applicable via the RED Delegated Regulation as of 1 August 2025 and apply to the categories of radio equipment covered by the RED Delegated Regulation if placed on the market on or after 1 August 2025.
Technical standards have been requested for the purposes of the RED Delegated Regulation and are cited in the Official Journal of the European Union, in support of the corresponding essential requirements of the RED (EN 18031 series). To ensure legal clarity, the Commission aims to repeal the RED Delegated Regulation as of 11 December 2027[1].
In such a case, the categories of radio equipment specified in the RED Delegated Regulation, if placed on the market between 1 August 2025 and 10 December 2027, will be subject to the essential requirements of the RED on cybersecurity, which were rendered applicable via the RED Delegated Regulation. Conversely, if those products are placed on the market on 11 December 2027, or later, once the CRA has started to apply, those products will be subject to the essential requirements of the CRA.
A repeal of the RED Delegated Regulation, with effect from 11 December 2027, will not affect the Union market surveillance and control, under the Radio Equipment Directive 2014/53/EU, of the compliance of radio equipment with the essential requirements of the RED on cybersecurity, if that radio equipment was or is placed on the EU market between 1 August 2025 and 10 December 2027, and was subject to any of those essential requirements.
Disclaimer
Disclaimer: This document is prepared by the Commission services and should not be considered as representative of the European Commission’s official position. The replies to the FAQs do not extend in any way the rights and obligations deriving from applicable legislation nor introduce any additional requirement. The expressed views are not authoritative and cannot prejudge any future actions the European Commission may take, including potential positions before the Court of Justice of the European Union, which is competent to authoritatively interpret Union law.