Delegated Regulation (EU) 2022/30 does not activate all three requirements for all radio equipment. Art. 3(3)(d) — network protection — applies to ALL internet-connected radio equipment. Art. 3(3)(e) — personal data and privacy — applies to internet-connected equipment that processes personal data, PLUS childcare equipment, toys and wearables regardless of internet connectivity. Art. 3(3)(f) — fraud protection — applies only to equipment that enables money, monetary value or virtual currency transfers. Your documentation must cover exactly the requirements that apply — no more, no less. REDCheck's product classification step determines which articles apply and generates documentation only for the relevant requirements. Use the free test first or go directly to the generator. €99 per product.
€99 one-time payment · 5 PDF documents in ZIP · 30 minutes · 100% in your browser
Each requirement has a different trigger condition defined in Art. 1 of the Delegated Regulation. Understanding which applies is the FIRST step in documentation.
Follow this decision tree. REDCheck's product classification step does this automatically.
No. Art. 3(3)(d) applies to INTERNET-CONNECTED radio equipment (Art. 1(1)). A DECT baby monitor that communicates locally without internet is NOT subject to Art. 3(3)(d). However, it MAY be subject to Art. 3(3)(e) if it is childcare equipment processing personal data (Art. 1(2)(b)). The trigger for each article is different.
Art. 3(3)(e) applies when the RADIO EQUIPMENT processes personal data — not the app. If the device has a microphone, a camera, or a GPS, the EQUIPMENT is processing personal data. The app is a secondary processor. The trigger is the equipment's capability, not the app's data collection.
No. Art. 3(3)(f) applies to radio equipment that enables the holder or user to transfer money, monetary value or virtual currency. Selling a product online is not the same as the product enabling payment. A smart plug sold on Amazon does not enable money transfer. An NFC payment terminal does. The distinction is the PRODUCT's function, not the sales channel.
5 PDF documents. Doc 1 (Product Classification) determines which of Art. 3(3)(d), (e) and (f) apply based on Art. 1 of Del. Reg. (EU) 2022/30.
Art. 1, Del. Reg. (EU) 2022/30 + Art. 3(3), Dir. 2014/53/EU.
Art. 21 + Annex V. Requirement-by-requirement documentation.
Arts. 3(3)(d) and (e). Structured risk table.
Art. 18 + Annex VI.
Art. 10(9) + Annex VII.
Look before you buy — Download sample dossier (PDF, fictitious product) — Real structure, real articles, real format. Fictitious data.
Generated from your data, in your browser. No product data leaves your computer.
5 PDF documents. 30 min. €99 per product. The documentation that Art. 21 requires BEFORE your product can bear CE marking.
If you fully apply EN 18031, you can self-declare via Module A (Annex II) without a Notified Body. If you partially apply or don't apply the harmonised standards, Art. 17(4) requires third-party involvement. REDCheck does not replace a Notified Body — it generates the documentation that is a prerequisite for any conformity route.
We do not sell testing. We do not sell consulting. We sell the tool that structures your cybersecurity documentation under Art. 21 and Annex V.
Art. 46 of Directive 2014/53/EU requires Member States to establish penalties that are effective, proportionate and dissuasive.
Art. 40 of Directive 2014/53/EU. Market surveillance can require withdrawal across all 27 Member States.
Administrative fines under §19. Up to 1 year of imprisonment under §20.
Amazon and EU marketplaces require conformity documentation. Missing cybersecurity documentation triggers listing suspension.
| Alternative | Cost | What you get |
|---|---|---|
| Notified Body / accredited lab | €5,000–10,000 per model | 3–6 months. Full third-party assessment. |
| Cybersecurity consultancy | €5,000–15,000 per model | Custom report. Weeks of wait. |
| Assemble documentation yourself | €0 (your time) | EN 18031 has 600+ pages. No template. |
| REDCheck | €99 | 5 documents, 30 min, per model |
Professional Pack: €999 for 70 generations.
Request volume pricingREDCheck generates a document structured under Art. 21 and Annex V of Directive 2014/53/EU based on the information you enter. The truthfulness, accuracy and completeness of that information is your responsibility as manufacturer of the radio equipment.
We guarantee that the document structure follows Art. 21 and Annex V of Directive 2014/53/EU and that the legal references cited are correct as of the latest verification date. We do not guarantee that a specific document will be accepted by a market surveillance authority in a specific case, nor by a commercial buyer in a procurement process.
REDCheck is not legal advice. For specific situations, consult a lawyer or specialised regulatory consultancy.
Five PDF documents. Art. 21 and Annex V fully structured. Directive 2014/53/EU. Your product data never leaves your computer.