On October 27, 2023, the European Union issued an official gazette amending the RED Authorization Regulation (EU) 2022/30, in which the date description of the mandatory implementation time in Article 3 was updated to read:August 1, 2025。

RED Authorization Regulation (EU) 2022/30 is an official gazette issued by the European Union that stipulates that manufacturers of relevant products must take into account the cybersecurity requirements of the RED Directive when involving and producing them, namely RED 3(3) (d), RED 3(3) (e) and RED 3(3) (f).

• 3(3) (d): Will not harm the network or abuse network resources;
• 3(3) (e): Personal data and privacy of users and consumers are protected;
• 3(3) (f): Anti-fraud security features.

Up to now, the European Union’s standards organization is drafting and reviewing cybersecurity standards for the above three requirements. EN 18031-1, EN 18031-2 and EN 18031-3 are cybersecurity requirements regulations corresponding to RED3(3) (d), RED3(3) (e) and RED3(3) (f) respectively. The official version of this regulation has not yet been released, and it is expected to be released in September 2024.