Skip to main contentOpenAxia
CompareFor manufacturers

EU delegated act

RED Delegated Regulation on cybersecurity

(EU) 2022/30

What it covers

This delegated act switches on three RED requirements for connected radio products: protecting the network, protecting personal data and privacy, and protecting against fraud. A Wi-Fi motor, a smart hub or a gateway that reaches the internet is typically in scope; a one-way remote with no network link typically is not. The requirements apply from 1 August 2025. Harmonised standards (the EN 18031 series) were referenced with restrictions, so some products may still need a notified body. The Cyber Resilience Act (EU) 2024/2847 takes over these requirements: Delegated Regulation (EU) 2026/339 repeals this act from 11 December 2027, the day the Cyber Resilience Act applies in full. Products placed on the market between 1 August 2025 and 10 December 2027 stay subject to RED market surveillance for these requirements.

Official number
(EU) 2022/30
Kind
EU delegated act
Issued by
European Commission
Regions
European Union, European Economic Area
Applies to
Shading motors (blinds, shutters, awnings), Door and gate operators
Marking
CE
Applies from
2025-08-01
Official text
eur-lex.europa.eu

Key dates

  1. eur-lex.europa.eu
  2. eur-lex.europa.eu
  3. eur-lex.europa.eu
  4. eur-lex.europa.eu
  5. eur-lex.europa.eu

Part of

Certification programs

  • The manufacturer states, in an EU Declaration of Conformity, that the product meets the EU legislation that applies to it. For motorised shading drives this is typically the Low Voltage Directive and the EMC Directive, or the Radio Equipment Directive when the product contains a radio. Under the Low Voltage and EMC Directives the manufacturer can carry out the conformity assessment itself; under the Radio Equipment Directive this is allowed only when the relevant harmonised standards are applied in full, otherwise a notified body must be involved. CE marking is therefore a manufacturer declaration, not an independent certificate, and the mark alone does not say which standards were applied (the Declaration of Conformity lists them).

Market-access guides

Sources

  1. Delegated Regulation (EU) 2022/30 (EUR-Lex)
  2. Delegated Regulation (EU) 2023/2444 (application date)
  3. Cyber Resilience Act (EU) 2024/2847
  4. Delegated Regulation (EU) 2026/339 (repeal of 2022/30)
  5. Implementing Decision (EU) 2022/2191 (harmonised standards for radio equipment, incl. EN 18031)

This is our summary, not the legal text and not legal advice. Check the official text before you rely on it.

Need help with certification?

Tell us your product, the market and where you are with (EU) 2022/30. We read every request and reply by email. Ask about certification →