Radio Equipment Directive Red Consultant

Scope and evidence must be confirmed before any paid tests or filings.

What a RED consultant should decide before testing

A Radio Equipment Directive (RED) consultant should resolve the route to conformity, not sell a generic “CE certificate”. The initial deliverable is a reasoned decision on whether the finished product is radio equipment, which Article 3 requirements apply, which Official Journal-listed harmonised standards can be fully used, and which evidence is still missing.

The result is a defensible test and conformity-assessment brief for the exact hardware, firmware, antenna, markets and intended operation. Advice is not an approval, and neither a consultant nor an optional private certificate substitutes for the manufacturer’s compliance responsibility.

Classify the finished product and identify the responsible operator

Start with the unit actually being placed on the EU market. Under RED, radio equipment intentionally emits and/or receives radio waves for radio communication or radiodetermination. A finished product containing a compliant radio module is not automatically compliant as integrated; exclusions, other sector rules and configurations still require review. Capture the following before naming standards:

Product description, intended uses and users; marketed product name, manufacturer, importer and any own-brand arrangements.
Radio technologies, frequency bands, transmit power, operating modes, antenna gain/location, simultaneous transmissions and EU countries of use.
Hardware revisions, module identifiers, firmware versions, field-update capabilities, accessories and worst-case configurations.
Internet connectivity (directly or through other equipment), personal-data processing, payment/financial functions, child-use or wearable features.
Charging method and device category; supplier files, test reports, EU declarations, manuals, lab scopes and the planned first EU placing-on-market date.

Under RED Article 14, an importer or distributor assumes the manufacturer’s obligations if it places radio equipment on the market under its own name or trademark, or modifies equipment already placed on the market in a way that may affect compliance. Determine the actual legal role before assigning tasks; a supplier invoice is not enough.

Do not infer that all wireless devices trigger every RED cybersecurity or common-charger rule. Both require category-specific analysis. A device may also need assessment under separate EU measures, such as RoHS, without confusing those measures with RED itself.

For intended EU territories, separately check any national restrictions on putting the equipment into service or requirements for authorisation of use: RED Article 10(10) may require geographic information on packaging and in instructions. Passing an EU radio test does not itself grant permission to use every frequency in every Member State.

Decision matrix: when is a notified body needed?

Use this matrix per applicable essential requirement, not as a single product-wide yes/no. “Harmonised” means the relevant reference is published in the EU Official Journal and any publication restrictions are respected; an ETSI or EN designation alone is insufficient.

Requirement / evidence position	Available conformity route	Strategic implication
RED Article 3(1)(a)/(b) safety and EMC; and Article 3(4) common charging where applicable	Annex II internal production control is available even if a harmonised standard is not used; Annex III or IV may also be chosen.	Document the technical justification and evidence; do not buy notified-body services merely because an EMC test is needed.
Article 3(2) radio spectrum, or an applicable Article 3(3) requirement; relevant OJ-cited standards fully applied	Annex II may be used, or the manufacturer may elect Annex III/IV.	Verify scope, versions, configurations and any restricted presumption of conformity before selecting the internal route.
Applicable Article 3(2)/(3) requirement where relevant harmonised standards do not exist, are not applied or are applied only in part	Annex III (EU-type examination + conformity to type) or Annex IV (full quality assurance), involving an appropriately scoped notified body.	Define exactly which essential requirement and product category the notified body must cover; check NANDO scope.
EN 18031-1/-2/-3:2024 cybersecurity evidence with an OJ restriction or uncovered clause	No automatic full presumption merely from naming the standard; apply Article 17 route logic to the actual coverage.	Map the restriction, close the technical gap and decide whether a notified body is required rather than assuming a generic “cyber certificate” works.

An OJ limitation must be checked against the particular configuration: it does not, by itself, make a notified body mandatory if the limitation does not affect the device and the relevant essential requirement remains fully covered. If coverage is incomplete for Article 3(2) or (3), Article 17(4) requires Annex III or IV. The harmonised-standards register must be dated: Implementing Decision (EU) 2026/2003, published on 7 September 2026, changed selected RED references and includes transition dates for certain entries. Check the exact standard, OJ notice and applicable date at the intended placing on the market, not only the 2025 EN 18031 decision.

The manufacturer performs conformity assessment under RED Article 17. A laboratory test report and an EU-type examination certificate are different instruments; not every RED device requires the latter.

2026 decision gate: cybersecurity, CRA and charging

For certain categories, Delegated Regulation (EU) 2022/30 has applied RED Article 3(3)(d) network protection, (e) privacy/personal data and (f) fraud protection since 1 August 2025. Classification depends on the actual connectivity, data and transaction functions, not the presence of Bluetooth alone. Decision (EU) 2025/138 lists EN 18031-1/-2/-3:2024 with restrictions, including specific default-password options; therefore check the exact published notices.

Delegated Regulation (EU) 2026/339 was published on 29 April 2026 and repeals Regulation 2022/30 with effect only from 11 December 2027. The Cyber Resilience Act’s principal product requirements apply from that date; its Article 14 reporting obligations apply from 11 September 2026 for products within its scope, subject to its transitional rules. Do not treat the future repeal as a current exemption or assume that CRA applicability follows automatically from RED scope.

Since 11 September 2026, CRA Article 14 imposes reporting of actively exploited vulnerabilities and severe incidents affecting the security of in-scope products with digital elements. This reporting can also cover in-scope products placed on the EU market before 11 December 2027, under Article 69(3); the earlier reporting start does not bring all CRA product-design requirements forward. Confirm product scope, manufacturer role and reportable event before deciding that a notification is due.

If a cybersecurity event may be reportable under CRA Article 14, record when the manufacturer became aware of it and assess the reporting trigger immediately. The rules provide for an early warning within 24 hours and a notification within 72 hours, using the ENISA Single Reporting Platform; later reports have separate deadlines. The exact reporting duties depend on the product and incident.

Separately, RED Article 3(4) and Annex Ia impose common-charger obligations on defined categories of wired-rechargeable radio equipment: most listed categories since 28 December 2024 and laptops since 28 April 2026. Check product category, wired charging, USB-C/charging capabilities and consumer offer obligations; not all RED products are covered.

Evidence reuse: accept, bridge or replace?

Before commissioning repeat tests, assign each existing document an evidence status. The reviewer must be able to connect a report to the complete marketed configuration and to an applicable essential requirement.

Evidence offered	Possible use	Gap that triggers further work
Module RED test report or EU-type examination	Potentially useful for unchanged module-level characteristics and the assessed installation conditions.	Host integration, new antenna, enclosure, power supply, simultaneous radio use or operating modes outside the original scope.
FCC/ISED report or overseas certificate	Engineering background or relevant measurement data after a documented technical comparison.	No automatic EU RED presumption: EU legal requirements, OJ-listed standards, test methods and equipment configuration may differ.
Previous EU report for a related model	Conditional reuse when hardware, firmware, performance, standards and technical traceability remain relevant.	Unexplained revision, obsolete standard reference, changed power/bands or new cybersecurity/charging requirements.
Supplier security claims or a generic “CE certificate”	Input for questions, supplier controls and documentary traceability.	Missing product-specific risk assessment, implementation evidence, applicable OJ limitations or verifiable legal conformity documentation.

A “reuse” decision is an evidence judgment, not an exemption from conformity assessment. Record the version, issuer, test object, deviations, review owner and missing proof for each item.

The gap-analysis sequence before purchasing tests

A useful consulting engagement delivers gated decisions in this order:

Freeze the marketed SKU and representative worst-case variants; identify the legal manufacturer and EU economic-operator responsibilities.
Build the RED essential-requirement applicability map, including Article 3(3) delegated measures, common charger and separately applicable EU legislation.
Build a dated harmonised-standard ledger: OJ reference, version, scope, restrictions, applicable clauses and any missing coverage.
Crosswalk existing evidence to each requirement and variant; distinguish accepted evidence from bridging analysis and new tests or design changes.
Decide Annex II versus Annex III/IV per Article 17; if a notified body is needed, verify its specific notified scope before defining a lab and assessment brief.

Escalate design blockers before laboratory booking. For example, a restricted band, a disallowed security implementation or missing charger interface is not solved by ordering the same tests again.

Accountability and the written decision output

The manufacturer remains responsible for design, conformity assessment, technical documentation, EU declaration of conformity and CE marking. Importers and distributors have distinct RED checks; private lab or consultant involvement does not transfer those duties. An authorised representative may act only within a written mandate. For non-EU supply chains, check the EU economic operator required by Regulation (EU) 2019/1020 Article 4 where applicable.

Ask for a written, version-controlled advisory output containing:

Product-scope and operator-role memorandum with exclusions and assumptions.
Article-by-article applicability and conformity-route matrix, including notified-body rationale.
Evidence reuse register and prioritised gap list: missing facts, design fixes, new test evidence or documentary remedies.
Go/no-go conditions, change triggers and a scoped execution brief; never a guarantee of clearance or an invented deadline.

Where strategic advice ends and execution begins

This page owns classification, route choice and evidence strategy. Once those decisions are stable, delivery work belongs to the relevant specialist workflow.

For document production, supplier coordination, declarations and implementation, see RED compliance implementation services; for sample plans, radio/EMC/safety measurements and retest decisions, see RED testing services. For a separate hazardous-substances assessment, see EU RoHS compliance advice.

No claimed EU-wide “RED consultant licence”, official filing fee or universal test timeline is implied. An EU declaration is normally the manufacturer’s declaration after the applicable conformity assessment, not a general premarket government approval.

Questions that change a RED strategy

Does a CE-marked Bluetooth module clear the finished device?

No. Reuse the module file only within its proven conditions; reassess the integrated product, antennas, installation, safety/EMC, software and any applicable additional requirements.

Must every Wi-Fi product use a notified body?

No. For Article 3(2) and applicable 3(3) requirements, Annex II is available where relevant OJ-cited harmonised standards are fully applied. Where they are missing or only partly applied, Article 17 requires Annex III or IV.

Can an FCC test report replace EU RED evidence?

Not automatically. Review the measured configuration, test methods, EU essential requirements, current OJ references and any technical gaps; commission only the missing evidence.

Do RED cybersecurity rules disappear in 2026?

No. The targeted RED measures remain until their repeal takes effect on 11 December 2027. Check separately whether CRA Article 14 reporting applies from September 2026 and the later CRA product obligations.

Does a consultant sign the EU declaration instead of the manufacturer?

A consultant does not automatically take over manufacturer duties. A duly mandated authorised representative may perform specified tasks, but manufacturer responsibility and the applicable mandate must be analysed.

Does passing RED tests settle RoHS or battery obligations?

No. RED testing does not establish compliance with separate EU rules on restricted substances, batteries or other applicable product aspects.