FAQ item index

Search every question across sub-FAQs

Find the exact question, open the source answer card, and copy a direct link to the anchored sub-FAQ response.

Indexed coverage
45of45items
Across 10 modules • Updated May 9, 2026
Author
Sorena AI
Published
May 9, 2026
Updated
May 9, 2026
Wi-Fi and Bluetooth Products Under the EU RED

Are Wi-Fi and Bluetooth products covered by the RED?

Usually yes. A product with Wi-Fi, Bluetooth, BLE or another intentional radio communication function fits the RED concept of radio equipment when it intentionally emits or receives radio waves for radio communication. The assessment should cover the complete finished product placed on the EU market, including accessories, antennas, software and firmware needed for the radio equipment to operate as intended.

Do not reduce the file to a module certificate. A pre-certified radio module can be useful evidence, but the manufacturer or importer still needs a product-level RED decision for the final configuration, enclosure, antenna, power supply, firmware, host interface, instructions, restrictions, EU declaration and CE marking.

  • Map Article 3(1)(a) health and safety, Article 3(1)(b) EMC, and Article 3(2) efficient use of radio spectrum for every enabled radio mode.
  • Record frequency bands and maximum transmitted radio-frequency power in the user instructions for intentional transmitters.
  • Identify whether Article 3(3) delegated requirements apply, especially cybersecurity for internet-connected wireless products from 1 August 2025.
  • Keep the exact hardware, antenna, firmware, app and regional software settings with the technical documentation so the CE decision is traceable.
Citations
Wi-Fi and Bluetooth Products Under the EU RED

What RED obligations matter most for Wi-Fi and Bluetooth products?

The baseline obligations are not optional: health and safety, EMC and efficient spectrum use apply to radio equipment. For Wi-Fi and Bluetooth products this normally means safety and exposure evidence, EMC evidence, radio test evidence for each supported band and mode, and a standards matrix showing which essential requirements are covered.

Article 10 also matters in day-to-day product work. Instructions for intentional transmitters must include the frequency bands and maximum radio-frequency power. If the product is subject to restrictions on putting into service or authorisation-of-use requirements in at least one Member State, packaging and instructions need the required restriction information.

  • Do not ship with hidden or undocumented EU radio modes; the tested configuration should match the enabled configuration.
  • Tie each standard and test report to the specific radio mode it supports, such as 2.4 GHz Bluetooth/BLE, 2.4 GHz Wi-Fi, 5 GHz Wi-Fi, 6 GHz Wi-Fi, cellular, GNSS or NFC where present.
  • Track software and firmware updates that can change radio parameters, band availability, power, duty cycle, network behavior, cybersecurity controls or user restrictions.
  • If restrictions or authorisation requirements apply, use the Article 10(10) packaging and instruction approach instead of burying restrictions in engineering notes.
Citations
Wi-Fi and Bluetooth Products Under the EU RED

When do RED cybersecurity requirements apply?

A Wi-Fi or Bluetooth product needs a cybersecurity applicability decision, not a generic yes/no label. Delegated Regulation (EU) 2022/30 applies Article 3(3)(d) to radio equipment that can communicate itself over the internet, directly or through other equipment. It applies Article 3(3)(e) to listed categories when they can process personal, traffic or location data, and Article 3(3)(f) to internet-connected radio equipment that enables transfers of money, monetary value or virtual currency.

The application date was moved to 1 August 2025 by Delegated Regulation (EU) 2023/2444. For Wi-Fi products this often means the cybersecurity file is in scope. For Bluetooth-only products, the answer depends on the actual architecture: for example, whether the equipment itself can communicate over the internet via a phone, gateway or other equipment, whether it is childcare, toy or wearable radio equipment, what data it processes, and whether it enables payment or value transfer.

  • Classify whether the product can communicate itself over the internet, including through an intermediate phone, hub, router, app or gateway.
  • Check whether the product is childcare equipment, radio equipment covered by toy rules, or wearable radio equipment.
  • Record whether the product processes personal data, traffic data or location data, and whether it enables transfers of money, monetary value or virtual currency.
  • Keep cybersecurity requirements in the Article 3 matrix rather than treating them as a separate privacy or security policy only.
Citations
Wi-Fi and Bluetooth Products Under the EU RED

Can harmonised standards avoid a notified body?

Harmonised standards are voluntary, but when their references are published in the Official Journal and they are fully applied for the relevant requirement, they can give presumption of conformity for the requirement they cover. For Wi-Fi and Bluetooth products, keep the OJEU-cited standard reference, version, cessation date if relevant, and the exact requirement coverage in the standards matrix.

The notified-body trigger is especially important for Article 3(2) spectrum and Article 3(3) requirements. Commission RED guidance states that if relevant harmonised standards cited in the OJEU for Article 3(2) or 3(3) are not applied, not fully applied or do not exist, the manufacturer or authorised representative must use a conformity assessment procedure involving a notified body.

  • Use product-specific harmonised standards first where available; use generic standards only where appropriate and documented.
  • Do not assume a supplier report creates presumption of conformity unless the final product applies the relevant OJEU-cited harmonised standard for the covered requirement.
  • Escalate to the notified-body route when Article 3(2) or Article 3(3) coverage is incomplete, not applied or unavailable.
  • Recheck the standards matrix when a Wi-Fi, Bluetooth, BLE, antenna, enclosure, firmware or regional setting changes.
Citations
Wi-Fi and Bluetooth Products Under the EU RED

Common mistakes with Wi-Fi and Bluetooth RED files

The most common mistake is treating wireless compliance as a module procurement exercise. RED compliance belongs to the finished radio equipment placed on the EU market, so the compliance file should show how the module evidence, host design, antenna, power supply, enclosure, software, installation instructions and intended use fit together.

Another recurring issue is stale evidence after software or configuration changes. If an update changes radio behavior, cybersecurity behavior, software loaded into the equipment, restrictions, user information or the standards relied on, reopen the RED file before shipping the changed configuration.

  • Do not use a US FCC, Bluetooth SIG or Wi-Fi Alliance artifact as a substitute for the EU RED Article 3 assessment.
  • Do not cite a harmonised standard unless its OJEU status and covered essential requirements have been checked for the product configuration.
  • Do not omit app, cloud, gateway or firmware facts when they affect internet communication, cybersecurity applicability, radio settings or loaded software.
  • Do not bury frequency bands, maximum transmitted power, restrictions, safety information or declaration links where users and market surveillance authorities cannot find them.
Citations
Page 3 of 3