A smartwatch is wearable radio equipment under Art. 1(2)(d)(i) — worn on the wrist. If it processes personal data (heart rate, step count, sleep, GPS, user account) — Art. 3(3)(e) applies. Unlike most products, wearables face Art. 3(3)(e) even with Bluetooth-only connectivity. If your smartwatch ALSO connects to the internet (WiFi, LTE), Art. 3(3)(d) applies under Art. 1(1). Double requirement. REDCheck generates the 5 PDF documents covering both. 30 minutes. €99.
€99 one-time payment · 5 PDF documents in ZIP · 30 minutes · 100% in your browser
Smartwatches sit at the intersection of two regulatory triggers: wearable classification (Art. 1(2)(d)) and internet connectivity (Art. 1(1)). Most smartwatches trigger both Art. 3(3)(d) and Art. 3(3)(e).
You enter your product specifications. REDCheck structures the cybersecurity documentation requirement by requirement.
WRONG for wearables. Art. 1(2)(d) creates a SEPARATE trigger. Art. 3(3)(e) applies to wearables that process personal data — regardless of internet connectivity.
Heart rate and sleep patterns linked to a user account are personal data under GDPR Art. 4(1). Anonymisation requires that data CANNOT be linked back to the person. Most smartwatch apps maintain user accounts, making anonymisation claims unsustainable.
If your smartwatch falls under Regulation (EU) 2017/745 (medical devices), Art. 2(1)(a) EXCLUDES it from RED cybersecurity requirements. However, most consumer smartwatches do NOT qualify as medical devices.
5 PDF documents per product model. Each cites the exact article of Directive 2014/53/EU that it covers.
Art. 1, Del. Reg. (EU) 2022/30 + Art. 3(3), Dir. 2014/53/EU.
Art. 21 + Annex V.
Arts. 3(3)(d) and (e).
Art. 18 + Annex VI.
Art. 10(9) + Annex VII.
Look before you buy — Download sample dossier (PDF, fictitious product)
Generated from your data, in your browser. No product data leaves your computer.
5 PDF documents. 30 min. €99. Art. 21 prerequisite for any conformity route.
If you fully apply EN 18031, self-declare via Module A (Annex II). If not, Art. 17(4) requires third-party involvement.
We do not sell testing. We do not sell consulting. We sell the tool that structures your cybersecurity documentation.
Art. 46 of Directive 2014/53/EU requires effective, proportionate and dissuasive penalties.
Arts. 40(1), 40(4) and 43.
Produktsicherheitsgesetz.
Wearables are a high-volume category on Amazon EU.
| Alternative | Cost | What you get |
|---|---|---|
| Notified Body / consultancy | €5,000–15,000/model | 3–6 months. Dual requirement may cost more. |
| Internal certification team | ₩0 (staff time) | EN 18031: 600+ pages. Wearable classification is easy to miss. |
| Assemble yourself | ₩0 (your time) | No guidance on Annex V structure. |
| REDCheck | €99 | 5 documents, 30 min, per model |
Professional Pack: €999 for 70 generations.
Request volume pricingREDCheck generates a document structured under Art. 21 and Annex V of Directive 2014/53/EU based on the information you enter. The truthfulness, accuracy and completeness of that information is your responsibility as manufacturer of the radio equipment.
We guarantee that the document structure follows Art. 21 and Annex V of Directive 2014/53/EU and that the legal references cited are correct as of the latest verification date.
REDCheck is not legal advice. For specific situations, consult a lawyer or specialised regulatory consultancy.
Five PDF documents. Art. 21 and Annex V fully structured. Directive 2014/53/EU. Your product data never leaves your computer.