breaches. Compliance experts such as the BSI Group advise manufacturers to check whether their product falls under the scope of these three standards. If they do, the manufacturer should conduct a compliance gap analysis; implement any necessary changes in design, testing and documentation; and consult with a RED Notified Body to obtain a certificate which demonstrates market compliance. Onus on manufacturers, but duty for resellers Inevitably the greater responsibility lies with manufacturers to ensure that their new equipment complies with the new RED DA regulations by establishing conformity through appropriate certification schemes. But resellers and distributors should also make sure that what they sell complies. If the equipment being sold is judged to present any form of risk, resellers and distributors have a duty not to sell it and should inform the manufacturer and the relevant market surveillance authority. Compliance
experts also advise that failure to comply with these requirements could lead to warnings and penalties from the individual state’s relevant supervisory authority, and in the worst case a sales ban and/or prosecution associated with a breach of competition law. With the deadline for compliance with the EU’s Cyber Reslience Act (CRA) in the pipeline for in 2027 (with some requirements coming into force in 2026), it may be a good idea for manufacturers to prepare for both regulations at the same time. “The path to Cyber Resilience Act compliance starts now with RED DA – not in 2026,” stated Manual Weber, Lead Embedded Software Architect at technology consulting services firm Zühlke in a recent blog. “Early action means fewer surprises, smoother transitions, and stronger products.” Crucially, the RED DA directive doesn’t apply to equipment in circulation before 1 August 2025 however, so products already in distribution or with retailers within the EU/EEA prior to this date are not subject to the requirements. n
Manuel Weber Lead Embedded Software Architect
zuhlke.com
RED 2022/2380 Requirements for UC Resellers 8 Applies to all new UC solution components capable of connecting to the Internet. 9 Includes wireless network infrastructure and telecommunications equipment as well as end user devices such as smartphones, tablets, laptops, headsets and cameras, regardless of whether or not they use that capability. : All new UC products manufactured and sold in EU countries after 1 August 2025 must comply (those in circulation before this date are not covered by the directive). ; Resellers and distributors must ensure the new products they sell comply, and have a duty not to sell them if not. < Legal experts advise that failure to comply could lead to warnings and penalties from individual states’ relevant
supervisory authorities, and even sales bans and prosecution under competition laws.
wu cwawd v. naenwc es idn.tchoemc h a n n e l .c o. u k
49 5337
Powered by FlippingBook