Amund It's very likely to be in scope for that reason.
The Commission are writing a guide for this which will be published next year Best regards Charlie Charlie Blackham Sulis Consultants Ltd Tel: +44 (0)7946 624317 Web: https://sulisconsultants.com/ Registered in England and Wales, number 05466247 From: Amund Westin <am...@westin-emission.no> Sent: Tuesday, November 28, 2023 1:03 PM To: Charlie Blackham <char...@sulisconsultants.com>; EMC-PSTC@LISTSERV.IEEE.ORG Subject: SV: [PSES] EU Cyber Resilience Act I guess such "in house temp sensor" is within the Cyber security scope ... https://eur-lex.europa.eu/resource.html?uri=cellar:864f472b-34e9-11ed-9c68-01aa75ed71a1.0001.02/DOC_1&format=PDF Article 2 Scope 1. This Regulation applies to products with digital elements whose intended or reasonably foreseeable use includes a direct or indirect logical or physical data connection to a device or network. * The wording <indirect> means devices where the wireless data trafic must pass other devices before it's on the Internet ... ? BR Amund Fra: Amund Westin Sendt: 28. november 2023 13:43 Til: 'Charlie Blackham' <char...@sulisconsultants.com<mailto:char...@sulisconsultants.com>>; 'EMC-PSTC@LISTSERV.IEEE.ORG' <EMC-PSTC@LISTSERV.IEEE.ORG<mailto:EMC-PSTC@LISTSERV.IEEE.ORG>> Emne: SV: [PSES] EU Cyber Resilience Act Great Information, Charlie. One thing ... Let's say a temperature sensor on NB-IoT (sim card) is definitely a radio product which is connected to the internet. But what about the same temperature sensor when using BLE, Zigbee or other typical smart house protocols, not directly connected to the Internet, but to a local in-house gateway, which the gateway itself is connected to Internet by wire or radio. Will that "in house temp sensor" be classified as "connected to Internet", so the Cyber Resilience Act will apply even for such sensors? BR Amund Fra: Charlie Blackham Sendt: 28. november 2023 09:32 Til: EMC-PSTC@LISTSERV.IEEE.ORG<mailto:EMC-PSTC@LISTSERV.IEEE.ORG> Emne: Re: [PSES] EU Cyber Resilience Act Amund The RED has requirements that are separate, but aligned with, the Cyber Resilience Act Delegated Regulation (EU) 2022/30 which relates to Articles 3.3(d), 3.3(e), and 3.3(f) of the Radio Equipment Directive (RED), which is now applicable from 1st August 2025 as per Delegated Regulation (EU) 2023/2444. Applicable sections of Article 3.3: d) No harm to network - any radio that communicates over the internet e) Privacy of the user - any radio processing personal data, traffic data, location f) Protection from Fraud - any radio enabling money transfer CENELEC are developing three Article 3.3 standards, one for each of these parts: * EN 18031-1: Common security requirements for radio equipment Part 1: Internet connected radio equipment * EN 18031-2: Common security requirements for radio equipment Part 2: radio equipment processing data, namely Internet connected radio equipment, childcare radio equipment, toys radio equipment and wearable radio equipment * EN 18031-3: Common security requirements for radio equipment Part 3: Internet connected radio equipment processing virtual money or monetary value The plan is that these will be published by CENELEC but 30th June 2024 and that these will be listed in the OJ by the EU Commission and become "Harmonised Standards listed in the Official Journal" If they are accepted by the EU and listed, then manufacturers will be able to apply them and self-declare. If they aren't, manufacturers will have to use a Notified Body Best regards Charlie Charlie Blackham Sulis Consultants Ltd Tel: +44 (0)7946 624317 Web: https://sulisconsultants.com/ Registered in England and Wales, number 05466247 From: Amund Westin <am...@westin-emission.no<mailto:am...@westin-emission.no>> Sent: Tuesday, November 28, 2023 7:48 AM To: EMC-PSTC@LISTSERV.IEEE.ORG<mailto:EMC-PSTC@LISTSERV.IEEE.ORG> Subject: [PSES] EU Cyber Resilience Act I have heard rumors about August 01, 2025, from that date the EU Cyber Resilience Act is mandatory and part of the CE marking (for relevant RED/radio products) Is it correct rumors? BR Amund ________________________________ This message is from the IEEE Product Safety Engineering Society emc-pstc discussion list. To post a message to the list, send your e-mail to All emc-pstc postings are archived and searchable on the web at: https://www.mail-archive.com/emc-pstc@listserv.ieee.org/<https://www.mail-archive.com/emc-pstc@listserv.ieee.org/%20> Website: https://ewh.ieee.org/soc/pses/ Instructions: https://ewh.ieee.org/soc/pses/list.html (including how to unsubscribe)<https://ewh.ieee.org/soc/pses/list.html> List rules: https://ewh.ieee.org/soc/pses/listrules.html For help, send mail to the list administrators: Mike Sherman at: msherma...@comcast.net<mailto:msherma...@comcast.net> Rick Linford at: linf...@ieee.org<mailto:linf...@ieee.org> For policy questions, send mail to: Jim Bacher at: j.bac...@ieee.org<mailto:j.bac...@ieee.org> ________________________________ To unsubscribe from the EMC-PSTC list, click the following link: https://listserv.ieee.org/cgi-bin/wa?SUBED1=EMC-PSTC&A=1 ________________________________ This message is from the IEEE Product Safety Engineering Society emc-pstc discussion list. To post a message to the list, send your e-mail to All emc-pstc postings are archived and searchable on the web at: https://www.mail-archive.com/emc-pstc@listserv.ieee.org/<https://www.mail-archive.com/emc-pstc@listserv.ieee.org/%20> Website: https://ewh.ieee.org/soc/pses/ Instructions: https://ewh.ieee.org/soc/pses/list.html (including how to unsubscribe)<https://ewh.ieee.org/soc/pses/list.html> List rules: https://ewh.ieee.org/soc/pses/listrules.html For help, send mail to the list administrators: Mike Sherman at: msherma...@comcast.net<mailto:msherma...@comcast.net> Rick Linford at: linf...@ieee.org<mailto:linf...@ieee.org> For policy questions, send mail to: Jim Bacher at: j.bac...@ieee.org<mailto:j.bac...@ieee.org> ________________________________ To unsubscribe from the EMC-PSTC list, click the following link: https://listserv.ieee.org/cgi-bin/wa?SUBED1=EMC-PSTC&A=1 - ---------------------------------------------------------------- This message is from the IEEE Product Safety Engineering Society emc-pstc discussion list. To post a message to the list, send your e-mail to <emc-p...@ieee.org> All emc-pstc postings are archived and searchable on the web at: https://www.mail-archive.com/emc-pstc@listserv.ieee.org/ Website: https://ewh.ieee.org/soc/pses/ Instructions: https://ewh.ieee.org/soc/pses/list.html (including how to unsubscribe) List rules: https://ewh.ieee.org/soc/pses/listrules.html For help, send mail to the list administrators: Mike Sherman at: msherma...@comcast.net Rick Linford at: linf...@ieee.org For policy questions, send mail to: Jim Bacher: <j.bac...@ieee.org> _________________________________________________ To unsubscribe from the EMC-PSTC list, click the following link: https://listserv.ieee.org/cgi-bin/wa?SUBED1=EMC-PSTC&A=1
