2 regulations recorded for the European Union in the panorama of IoT cyber security regulations, which compares every country that regulates the cyber security of connected products. They apply in the 27 member states of the European Union.
Cyber Resilience Act
Cyber Resilience Act (EU 2024/2847)
| Question | Answer |
|---|---|
| Is the regulation in force? | Yes |
| Scope | Products with a digital element |
| Who must follow the regulation? | Manufacturers, importers, distributors, commercial open source |
| Mandatory or Voluntary? | Mandatory |
| Is there a label or a certification? | Yes (CE) |
| Does the regulation mandate baseline security requirements? | Yes |
| Are there additional requirements to the baseline security? | Yes |
| Does the regulation contains assurance levels? | Yes |
| Is compliance with ETSI EN 303 645 a requirement? | Partially |
| Can ETSI EN 303 645 be used to comply with the regulation? | Yes |
| Are other standards or guidance referenced? (cf. regulation) | Yes |
Radio Equipment Directive: Delegated Act for cyber security
Articles 3(3)(e) and (f) of the Radio Equipment Directive 2014/53/EU
| Question | Answer |
|---|---|
| Is the regulation in force? | Yes |
| Scope | Childcare radio equipment, toys, wearable devices, Internet-connected radio equipment (with exceptions) |
| Who must follow the regulation? | IoT manufacturers |
| Mandatory or Voluntary? | Mandatory |
| Is there a label or a certification? | Yes (CE) |
| Does the regulation mandate baseline security requirements? | Yes |
| Are there additional requirements to the baseline security? | No |
| Does the regulation contains assurance levels? | No |
| Is compliance with ETSI EN 303 645 a requirement? | No |
| Can ETSI EN 303 645 be used to comply with the regulation? | Yes |
| Are other standards or guidance referenced? (cf. regulation) | Yes |
Every other country
Australia
Brazil
Canada
China
Egypt
Hungary
India
Japan
Kingdom of Saudi Arabia
Oman
Singapore
South Korea
Switzerland
Thailand
United Arab Emirates
United Kingdom
USA
Vietnam
Licence: Free to use for non-commercial purposes. Any use must credit cetome and link to cetome.com/panorama. The data is also open on GitHub.