EU Delegated Regulation (EU) 2022/30 (Radio Equipment Cybersecurity)
Article 3 and later acts: entry into force, application from 1 August 2025, repeal from 11 December 2027 – EU Delegated Regulation (EU) 2022/30 (Radio Equipment Cybersecurity)

EU Delegated Regulation (EU) 2022/30 (Radio Equipment Cybersecurity) 3.2: Repeal from 11 December 2027 and the transition to the Cyber Resilience Act

Delegated Regulation (EU) 2026/339, adopted on 16 February 2026 and published in the Official Journal on 29 April 2026, repeals this Regulation with effect from 11 December 2027, the day the CRA, Regulation (EU) 2024/2847, becomes fully applicable. The Commission's reasoning is that Annex I of the CRA contains every element of the three RED requirements, so keeping both would create double regulation for the same products. Two consequences bind manufacturers now. First, the repeal does not undo market surveillance of equipment placed on the market between 1 August 2025 and 10 December 2027; non-conforming units from that window can still be the subject of corrective measures, so files and declarations for that period must be kept. Second, the transition must be planned: EU-type examination certificates issued for Article 3(3)(d), (e) or (f) will lose their basis when the Regulation falls away, the references to EN 18031-1, -2 and -3 are to be removed from the RED harmonised standards decision after the repeal, and products placed on the market from 11 December 2027 will instead need CRA conformity assessment and documentation.

Maintained by Gerard Blokdyk

Other controls in Article 3 and later acts: entry into force, application from 1 August 2025, repeal from 11 December 2027 – EU Delegated Regulation (EU) 2022/30 (Radio Equipment Cybersecurity)

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.