Electronics Guide

The CE Marking System

The CE marking indicates that the manufacturer takes responsibility for the product's conformity with all Union legislation that applies to it. The letters are commonly glossed as Conformité Européenne, though the legislation itself does not define them as an abbreviation. The marking is neither a quality mark nor a certificate issued by an authority. It is a manufacturer's declaration supported by technical evidence.

A common misconception deserves correction: presumption of conformity does not flow from the marking. It flows from applying harmonized standards whose references have been published in the Official Journal of the European Union. What the marking secures is free movement. Member states must not impede the placing on the market of CE-marked products that satisfy the applicable legislation.

The marking must be affixed visibly, legibly, and indelibly to the product or its data plate before the product is placed on the market. Where product size or nature makes this impractical, the marking may appear on the packaging and the accompanying documents. The letters follow a fixed proportional form, with a vertical dimension of at least 5 mm unless a specific directive allows otherwise. Where a notified body is involved in the production control phase, its four-digit identification number follows the marking. Other markings must not obscure or reduce the visibility of the CE marking. Affixing the marking to a non-compliant product, or to a product outside the scope of CE marking legislation, is an offense in every member state.

New Legislative Framework (NLF)

The New Legislative Framework, adopted in 2008 as Regulation (EC) No 765/2008 and Decision No 768/2008/EC, supplies the common legal architecture for CE marking across Union product legislation. Directives revised to align with it share definitions, economic operator obligations, conformity assessment modules, and safeguard procedures. The 2014 alignment package rewrote the Low Voltage, EMC, ATEX, and Radio Equipment Directives on this pattern, which is why their structures now read almost identically.

The framework allocates duties along the supply chain. Manufacturers bear primary responsibility: they design and manufacture to the applicable requirements, compile the technical documentation, carry out or arrange conformity assessment, draw up the declaration, and affix the marking. Importers verify that the manufacturer has done so before placing a product on the market, and add their own name and address to the product or its packaging. Distributors check that required markings and documents are present and that storage or transport conditions do not compromise conformity. An importer or distributor who modifies a product, or markets it under its own name or trademark, assumes the obligations of a manufacturer. All operators must be able to identify who supplied them and to whom they supplied, and must cooperate with market surveillance authorities.

Declaration of Conformity

The EU Declaration of Conformity is a legally binding statement that the product meets the applicable requirements. It must identify the manufacturer and the product with enough precision for traceability, list every applicable Union act, cite the harmonized standards or other technical specifications applied, name the notified body and the certificate reference where one was involved, and carry the place and date of issue with the signature of a person empowered by the manufacturer. The declaration must be revised whenever the product changes in a way that affects conformity or whenever the referenced requirements change.

Where a product falls under several acts, a single declaration may cover all of them, which is the normal practice for electronics subject to the Low Voltage, EMC, and RoHS regimes at once. The declaration must be kept available for market surveillance authorities and, under several directives, must accompany the product. Language requirements are set by the member state where the product is placed on the market. Radio equipment is a notable case: the directive permits a simplified declaration on the product or in the instructions, provided it gives the exact internet address where the full declaration can be obtained.

Technical Documentation

Technical documentation demonstrates how the product satisfies the essential requirements and provides the evidence behind the declaration. Contents vary by act, but the recurring elements are a general product description, design and manufacturing drawings with circuit diagrams and component lists, descriptions of the procedures that keep serial production in conformity, the list of harmonized standards applied with an explanation of how any unapplied clauses are otherwise addressed, risk assessments, test reports, and the instructions and safety information supplied to the user.

Documentation must be retained for ten years after the last unit of the product is placed on the market, a period that runs from the last placement rather than from the design date. The file need not be physically located in the Union, but it must be produced to an authority within a reasonable period on request, and the authority may require translation into a language it accepts. In practice, incomplete or unretrievable technical files are among the most common findings in market surveillance actions, so the discipline of keeping the file organized, versioned, and complete matters as much as the underlying testing.

Conformity Assessment Procedures

Decision No 768/2008/EC defines eight base modules, A through H, together with variants such as A1, A2, C1, C2, D1, E1, and F1. Each act selects the modules available for its products. Module A, internal production control, allows the manufacturer to assess conformity alone and covers most electronics. Higher-risk products draw on Module B (EU-type examination) combined with a production-phase module: Module C (conformity to type), Module D or E (quality assurance of production or of final product inspection), or Module F (product verification). Module G covers unit verification, and Module H full quality assurance. The design of the sequence is deliberate: type examination fixes the design, and the paired module keeps serial production faithful to it.

Notified bodies are conformity assessment bodies designated by a member state and notified to the Commission for specific acts and product ranges. They must satisfy competence, independence, and impartiality requirements and remain under supervision by their designating authority. A manufacturer may use any notified body designated for the relevant act, regardless of which member state designated it. The Commission's NANDO database is the authoritative list of notified bodies and their scopes, and it is worth consulting directly, since a body's scope can be narrower than its marketing suggests.

Scope and Requirements

The Low Voltage Directive 2014/35/EU, applicable since 20 April 2016, covers electrical equipment rated between 50 and 1000 V AC or between 75 and 1500 V DC. The voltage range refers to the input or output voltage of the equipment, not to internal voltages, so a device powered from a 12 V external supply falls outside the directive even if it generates high voltages internally. Household appliances, power tools, luminaires, information technology equipment, power supplies, and the electrical assemblies within industrial machinery all fall within scope.

Equipment below the lower voltage limits is not covered by the LVD but remains subject to the General Product Safety Regulation (EU) 2023/988, which has applied since 13 December 2024 and replaced the earlier General Product Safety Directive. Specific categories are excluded from the LVD because dedicated regimes address them: equipment for explosive atmospheres, electro-medical equipment, electricity meters, plugs and socket outlets for domestic use, electric fence controllers, radio-electrical interference, specialized equipment for ships, aircraft, and railways, and lifts and goods hoists.

Essential Safety Objectives

Annex I of the directive sets out the principal elements of the safety objectives. Equipment must protect against hazards arising from the equipment itself and against hazards caused by external influences acting on it. The first group covers protection against direct and indirect contact with live parts, against temperatures, arcs, and radiation that would cause danger, against non-electrical hazards that experience shows can arise from electrical equipment, and against risks from foreseeable overload conditions.

The second group requires insulation appropriate to foreseeable conditions, mechanical strength adequate to expected stresses, resistance to non-mechanical influences under expected environmental conditions, and protection in foreseeable overload situations. Equipment must carry the markings needed for safe use and must be accompanied by instructions covering installation, use, and maintenance. The objectives are deliberately technology-neutral. They state what must be achieved and leave the method to the designer, which is what allows a single directive to govern everything from a toaster to a laboratory power supply.

Harmonized Standards

Harmonized standards translate the safety objectives into testable requirements, and applying them confers presumption of conformity. The principal families are the EN 60335 series for household and similar appliances, EN IEC 62368-1 for audio, video, information, and communication technology equipment, EN 61010 for measurement, control, and laboratory equipment, EN 60598 for luminaires, and EN 60204-1 for the electrical equipment of machines. EN IEC 62368-1, a hazard-based safety engineering standard, fully replaced the earlier prescriptive standards EN 60950-1 for information technology equipment and EN 60065 for audio and video equipment at the end of the transition period in December 2020. CENELEC adopts the European versions, sometimes with common modifications or national deviations.

Using a harmonized standard is voluntary. A manufacturer may take another route, but must then demonstrate through analysis, risk assessment, and testing that the essential requirements are met, which is a substantially heavier burden of proof. Only the versions whose references appear in the Official Journal of the European Union confer presumption of conformity, and the reference list lags behind the standards bodies' own publication schedules. Manufacturers should track both the standard version and its citation status, along with the dates on which superseded versions cease to confer presumption of conformity.

Conformity Assessment

The LVD uses Module A, internal production control, exclusively. There is no notified body route and no mandatory third-party testing. The manufacturer compiles the technical documentation, ensures that production processes maintain conformity, draws up the EU Declaration of Conformity, and affixes the CE marking. In practice most manufacturers commission an accredited laboratory anyway, because an independent report is far more persuasive during a market surveillance investigation than an internal one.

Typical test coverage includes dielectric strength testing of insulation, protective earthing continuity, touch current and leakage current measurement, temperature rise under normal and abnormal operation, single-fault and abnormal operation testing, creepage and clearance verification against the pollution degree and overvoltage category, mechanical strength and stability, glow-wire and flammability testing of enclosures and internal parts, and ingress protection where an IP rating is claimed. Component selection matters here as much as design: certified critical components with the correct ratings shorten the assessment considerably.

Electromagnetic Compatibility Requirements

The EMC Directive 2014/30/EU, applicable since 20 April 2016, requires that equipment neither generate electromagnetic disturbance beyond a level that allows other equipment to work as intended, nor be unduly affected by the disturbance present in its intended environment. Scope covers apparatus containing electrical or electronic components likely to generate or be affected by disturbance, together with fixed installations. Radio equipment is deliberately excluded, because the Radio Equipment Directive absorbs the same EMC requirements for those products.

The two limbs of the requirement, emission and immunity, must both be satisfied. This distinguishes the EU approach from regimes that regulate emission alone, and it means an immunity failure is a compliance failure even if the product emits nothing. Equipment that is inherently benign, such as passive components and simple resistive loads, is treated as satisfying the requirements without testing, and custom-built evaluation kits for professionals in a research and development facility are outside scope.

Emissions Standards

Conducted emissions testing measures disturbance travelling along power and signal cables into the supply network. EN 55032, the multimedia equipment standard, sets mains port limits from 150 kHz to 30 MHz, measured through a line impedance stabilization network with both quasi-peak and average detectors. Limits differ by class: Class B applies to residential environments and is roughly 10 dB tighter than Class A, which applies to commercial and industrial environments. Class A products must carry a warning that they may cause radio interference in a residential setting. Conducted emissions usually respond to input filtering, careful switching-converter layout, and control of common-mode current paths.

Radiated emissions testing measures the field radiated by the equipment and its cables. Measurements run from 30 MHz to 1 GHz on a semi-anechoic chamber or open-area test site, extending to 6 GHz for equipment containing internal sources above 108 MHz. The procedure requires scanning antenna height, rotating the equipment through azimuth, and testing both antenna polarizations to capture the worst case. Remedies lie mostly in design: return-path continuity under high-speed traces, spread-spectrum clocking, enclosure shielding and seam control, and cable shield termination. Other product families have their own standards, including EN 55011 for industrial, scientific, and medical equipment, EN 55014-1 for household appliances and power tools, EN 61800-3 for adjustable-speed drives, and EN IEC 61326-1 for measurement and laboratory equipment. Where no product or product-family standard applies, the generic emission standards EN IEC 61000-6-3 and EN IEC 61000-6-4 cover residential and industrial environments respectively.

Immunity Standards

Immunity testing subjects equipment to defined disturbances and checks that performance does not degrade unacceptably. The EN IEC 61000-4 series supplies the test methods. Electrostatic discharge testing under EN IEC 61000-4-2 applies contact and air discharges at severity levels running from 2 kV to 8 kV contact and 2 kV to 15 kV air. Radiated RF immunity under EN IEC 61000-4-3 exposes equipment to an amplitude-modulated field, commonly 3 V/m for residential and commercial environments and 10 V/m for industrial ones. Electrical fast transient and burst testing under EN IEC 61000-4-4 simulates the bursts produced when inductive loads are switched, and surge testing under EN IEC 61000-4-5 simulates lightning-induced and switching transients, typically at 1 kV line to line and 2 kV line to ground on AC mains ports.

Further tests cover conducted RF disturbance coupled onto cables (EN IEC 61000-4-6), power-frequency magnetic fields near transformers and heavy conductors (EN IEC 61000-4-8), and voltage dips, short interruptions, and voltage variations (EN IEC 61000-4-11). Related supply-quality standards address harmonic current emission and voltage fluctuation and flicker for equipment connected to public low-voltage networks. Performance criteria define what counts as acceptable behavior: Criterion A requires normal performance during and after the test, Criterion B allows temporary degradation with self-recovery, and Criterion C allows loss of function that the user can restore. Product standards such as EN 55035 for multimedia equipment select which tests apply, at which levels, and against which criterion, and defining the pass criteria for a specific product before testing begins avoids costly disputes at the laboratory.

Fixed Installations

A fixed installation is a particular combination of apparatus and other devices assembled, installed, and intended for permanent use at a predefined location. Industrial plants, telecommunications networks, and building electrical systems are typical examples. Fixed installations must meet the same protection requirements but follow a different route: they are not CE marked, and no declaration of conformity is drawn up for the installation as a whole. Instead, good engineering practice must be applied and documented, and a responsible person must be identified.

The documentation must record the EMC measures taken and the characteristics that allow conformity to be assessed, and must be held at the disposal of national authorities for as long as the installation is in operation. Where an installation causes or is likely to cause disturbance, authorities may require remedial measures. Apparatus placed on the market for incorporation into a fixed installation must comply as apparatus in the ordinary way, but apparatus made available only for a particular fixed installation and not otherwise placed on the market is exempt, provided its packaging or documents identify the installation and state the precautions needed. This arrangement keeps EMC protection intact while acknowledging that a custom control cabinet cannot sensibly be type-tested as a consumer product.

Conformity Assessment Options

The directive offers two routes. Module A, internal production control, applies where an EMC assessment covering all relevant phenomena has been carried out, whether by harmonized standards or by other technical means. The manufacturer performs or arranges testing, compiles the documentation, and issues the declaration. This route serves the overwhelming majority of electronics.

Module B combined with Module C, EU-type examination followed by conformity to type, brings a notified body into the assessment of a representative sample. It is optional under this directive and may be chosen where harmonized standards do not cover the product fully, where a complex system resists straightforward assessment, or where a customer or authority values independent scrutiny. Whichever route is chosen, an EMC assessment remains mandatory: relying on component-level compliance without assessing the finished apparatus is a common and indefensible shortcut.

Scope and Application

The Radio Equipment Directive 2014/53/EU, applicable since 13 June 2016, covers equipment that intentionally emits or receives radio waves for communication or radiodetermination, and equipment that must be completed with an accessory to do so. It replaced the R&TTE Directive 1999/5/EC. Wireless modules, mobile handsets, wireless local area network equipment, Bluetooth devices, remote controls, radio-frequency identification readers, satellite navigation receivers, radar, and broadcast receivers all fall within scope.

Exclusions are listed in Annex I and cover amateur radio equipment not made available on the market, marine equipment under the Marine Equipment Directive, certain aeronautical products, custom-built evaluation kits for professionals in research and development facilities, and equipment used exclusively for public security, defense, state security, or state activities in the criminal law field. Because the directive absorbs the safety and EMC requirements for radio equipment, products within its scope are not separately assessed under the Low Voltage and EMC Directives; the declaration cites RED alone for those aspects.

Essential Requirements

Article 3 groups the essential requirements into three parts. Article 3(1)(a) covers protection of health and safety, including the safety objectives of the Low Voltage Directive but without the lower voltage limit, so a battery-powered wireless sensor is still subject to safety requirements. It also brings in exposure limits for electromagnetic fields. Article 3(1)(b) covers electromagnetic compatibility, mirroring the EMC Directive's protection requirements.

Article 3(2) requires effective and efficient use of the radio spectrum so as to avoid harmful interference. Article 3(3) contains a list of further requirements, from network interoperability and access to emergency services through to privacy and fraud protection, none of which apply automatically. Each becomes binding only for the equipment classes designated by a Commission delegated act. Identifying which parts of Article 3 apply is the first analytical step for any radio product, because it determines both the standards to be used and whether a notified body must be involved.

Spectrum and Radio Requirements

Harmonized standards for the spectrum requirement come mainly from ETSI. The EN 300 series covers radio equipment by technology and band, and the EN 301 series covers telecommunications and interoperability aspects. These standards specify operating frequency ranges, maximum transmit power and equivalent isotropically radiated power, occupied bandwidth, spurious and out-of-band emission limits, channel access and duty cycle rules, and receiver blocking performance. Receiver parameters matter under this directive, unlike in some other jurisdictions, because a poor receiver contributes to inefficient spectrum use.

Equipment operating in license-exempt bands, such as wireless local area networks in the 2.4 GHz and 5 GHz bands, Bluetooth, and short-range devices in the sub-gigahertz bands, must respect the harmonized technical conditions that make license-exempt use possible. These frequently include dynamic frequency selection to protect radar in parts of the 5 GHz range, transmit power control, and listen-before-talk or duty cycle limits. Software-defined and reconfigurable radios raise a further question, since the manufacturer must ensure that a field-installable software change cannot push the equipment outside the conditions under which it was assessed.

Cybersecurity and the Common Charger

Two delegated measures have changed the practical shape of RED compliance. Commission Delegated Regulation (EU) 2022/30 activated the Article 3(3) requirements on network protection, protection of personal data and privacy, and protection from fraud for internet-connected radio equipment, toys and childcare equipment with radio, and wearables. The date of application was postponed by twelve months by Delegated Regulation (EU) 2023/2444 and took effect on 1 August 2025. The harmonized standards EN 18031-1, EN 18031-2, and EN 18031-3 address the three protection objectives respectively; where they are not applied in full, notified body assessment is required.

Directive (EU) 2022/2380, the common charger amendment, requires a USB Type-C receptacle and, for devices that can be charged by wire at more than 5 volts, more than 3 amperes, or more than 15 watts, support for the USB Power Delivery protocol, on a defined set of radio equipment including mobile phones, tablets, digital cameras, headphones, portable speakers, handheld video game consoles, e-readers, keyboards, mice, and portable navigation systems. It also requires that charging capability information be labeled and that consumers be able to buy a device without a charger. The requirement applied to the categories listed in points 1.1 to 1.12 of Annex Ia from 28 December 2024 and applies to laptops, which are point 1.13, from 28 April 2026.

Conformity Assessment Procedures

RED offers internal production control (Module A), EU-type examination followed by conformity to type (Modules B and C), and full quality assurance (Module H). Module A is available only where harmonized standards covering all applicable essential requirements exist and have been applied in full. Where a standard has not been applied, has been applied only in part, or does not exist for the technology in question, notified body involvement becomes mandatory for the affected requirements. Manufacturers of equipment using novel modulation schemes or unusual bands should assume the notified body route from the outset.

One point is widely misunderstood. Article 5 of the directive provides for registration of radio equipment types in a central EU system, but the obligation applies only to categories designated by a Commission delegated act, and no such act has been adopted. There is therefore no general RED registration requirement, and no operating EU radio equipment database that manufacturers must file into before placing products on the market. Registration duties for electronics arise elsewhere: in the EPREL database under the Energy Labelling Regulation, in national WEEE, battery, and packaging registers, and in EUDAMED for medical devices.

Documentation and Marking

The technical file must demonstrate compliance with each applicable essential requirement. For radio aspects this means test reports covering operating frequencies, transmit power, occupied bandwidth, spurious emissions, adaptivity or duty cycle behavior, and receiver parameters. Safety and EMC reports parallel those prepared under the Low Voltage and EMC Directives, and radio-frequency exposure assessment is required where applicable. The file must record the frequency bands in which the equipment operates and the maximum radio-frequency power transmitted, and both must also be stated in the instructions.

Instructions must be supplied in a language easily understood by consumers in the member state concerned. Where the equipment may be put into service only subject to restrictions in one or more member states, the packaging must carry information identifying those states, and the instructions must set out the restrictions. Where no restrictions apply, that fact may simply be stated. The simplified EU Declaration of Conformity, giving the internet address of the full text, is permitted and is the common approach for consumer devices with limited packaging space.

Scope and Electronic Components

The Machinery Directive 2006/42/EC covers machinery, interchangeable equipment, safety components, lifting accessories, chains, ropes and webbing, removable mechanical transmission devices, and partly completed machinery. Regulation (EU) 2023/1230 replaces it and applies from 20 January 2027, converting the rules into a directly applicable regulation and adding provisions on cybersecurity of safety functions, machinery with self-evolving behavior, digital instructions, and software placed on the market as a safety component in its own right.

For electronics engineers the relevance is direct. Control systems, safety relays and safety controllers, programmable logic controllers, drives, human-machine interfaces, sensors, and emergency stop circuits are all in scope as parts of machinery, and safety components placed on the market separately are products in their own right. Electrical equipment forming part of machinery is assessed against the safety objectives of the Low Voltage Directive, which the Machinery Directive incorporates by reference, in addition to machinery-specific requirements. The result is that a safety controller must satisfy both electrical safety requirements and functional safety requirements for its behavior under fault conditions.

Control System Safety Requirements

Annex I sets out essential health and safety requirements, including specific provisions for control systems. Control systems must withstand the intended operating stresses and external influences, and a fault in the control logic must not lead to a hazardous situation. Starting must be possible only by deliberate actuation of a control device, and restart after a stop must follow the same rule. Stop functions take priority over start functions, and the emergency stop must remain effective regardless of the operating mode.

Safety-related parts of control systems must be designed so that a hardware or software defect does not create a hazardous situation, which in practice requires redundancy, diversity, and diagnostic coverage proportionate to the risk. EN ISO 13849-1 provides a performance-based method, assigning a required Performance Level from a to e from the severity of injury, frequency of exposure, and possibility of avoidance, and evaluating the achieved level from the category of architecture, the mean time to dangerous failure, the diagnostic coverage, and the common cause failure score. EN IEC 62061 offers an alternative based on Safety Integrity Levels 1 to 3, with a similar treatment of architecture and probabilistic failure measures. The two standards have been progressively aligned, and either may be used, but the choice must be made and documented consistently for the whole safety function.

Conformity Assessment

Most machinery follows internal checks on the manufacture of machinery, with no notified body involvement. Machinery listed in Annex IV, which includes woodworking machines, presses, injection and compression molding machines, vehicle servicing lifts, and certain protective devices such as logic units for safety functions and two-hand control devices, must either be manufactured in full conformity with harmonized standards covering all applicable essential requirements, in which case internal checks remain available, or undergo EU type-examination or full quality assurance by a notified body. Regulation (EU) 2023/1230 restructures this list, and the categories requiring mandatory third-party assessment differ from the current Annex IV, so manufacturers of listed products should map their portfolio against the new list well before 2027.

The manufacturer compiles the technical file, issues the EU Declaration of Conformity, and affixes the CE marking. Partly completed machinery is different: it receives a declaration of incorporation rather than a declaration of conformity, is not CE marked under this directive, and must be accompanied by assembly instructions. The technical file must contain the risk assessment identifying hazards and documenting the measures taken, evidence that inherently safe design was considered before guarding, and evidence that guarding was considered before warnings. For safety-related control functions, the file must show how the required Performance Level or Safety Integrity Level is achieved, validated, and maintained.

Regulatory Framework

Regulation (EU) 2017/745 has applied since 26 May 2021 and replaced the Medical Devices Directive and the Active Implantable Medical Devices Directive. It substantially tightened requirements for clinical evidence, post-market surveillance, traceability, and notified body oversight. Electronic diagnostic equipment, patient monitors, therapeutic devices, and software qualifying as a medical device all fall within it.

Devices are classified as Class I, IIa, IIb, or III according to risk, using rules that weigh invasiveness, duration of contact, whether the device is active, whether it delivers or exchanges energy, and the seriousness of the decisions it informs. Software is a medical device when it has a medical purpose of its own, regardless of whether it runs on dedicated hardware or a general-purpose platform, and Rule 11 classifies it by the significance of the information it provides and the state of the patient. Rule 11 pushed a large body of previously Class I software into Class IIa or higher, which is one reason the transition proved so demanding.

Regulation (EU) 2023/607 extended the transition for devices certified under the old directives, on the conditions that the manufacturer had lodged an application with an MDR-designated notified body by 26 May 2024 and signed a written agreement by 26 September 2024. Subject to those conditions, Class III and implantable Class IIb devices may continue under legacy certificates until 31 December 2027, and other Class IIb, Class IIa, and Class I sterile or measuring devices until 31 December 2028. The same regulation removed the sell-off deadline, so compliant stock already in the supply chain may continue to be made available.

General Safety and Performance Requirements

Annex I sets out the general safety and performance requirements. They mandate risk management across the whole lifecycle, a hierarchy that puts inherently safe design ahead of protective measures and protective measures ahead of information for safety, manufacturing controls that hold conformity through serial production, performance that matches the intended clinical purpose, and labeling and instructions sufficient for safe use. For electronic devices this pulls in electrical safety, electromagnetic compatibility, alarm behavior, usability, software verification and validation, and, since Annex I explicitly addresses it, information security.

The supporting standards are well established. EN ISO 14971 governs risk management and must address hazards arising from software and hardware failure as well as from foreseeable misuse. EN IEC 62366-1 governs usability engineering. EN IEC 62304 governs the software lifecycle, with process rigor tied to a software safety classification. EN IEC 60601-1 governs the basic safety and essential performance of electrical medical equipment, with EN IEC 60601-1-2 addressing electromagnetic disturbances and a long list of particular standards for specific device types. Clinical evaluation must show that the device achieves its intended purpose with an acceptable benefit-risk profile, an obligation with no counterpart in ordinary product safety law.

Conformity Assessment and Notified Bodies

The assessment route follows the classification. Class I devices that are neither sterile nor measuring nor reusable surgical instruments may be self-declared. Every other class requires a notified body, which audits the quality management system, reviews the technical documentation on a sampling or full basis depending on class, and for the highest-risk devices submits the assessment to a further expert panel scrutiny procedure. The regulation raised the bar for notified body designation sharply, and the resulting shortage of capacity was the principal reason the transition had to be extended.

Documentation requirements are extensive: device description and specification, information supplied by the manufacturer, design and manufacturing information, the general safety and performance requirements checklist, benefit-risk analysis and risk management, product verification and validation including software validation and, where relevant, biological safety and sterilization validation, and the clinical evaluation and post-market clinical follow-up plan. Manufacturers must operate a quality management system, in practice built to EN ISO 13485. Unique Device Identification allows a device to be traced through the supply chain and is central to recall management, and registration in EUDAMED provides the public and authorities with a single reference point.

Post-Market Requirements

The regulation makes post-market surveillance a continuing, planned activity rather than a reactive one. Manufacturers must maintain a surveillance plan, gather and analyze data proactively, and feed conclusions back into risk management and clinical evaluation. Class I devices produce a periodic post-market surveillance report; Class IIa and above produce a periodic safety update report, updated annually for higher classes. Serious incidents and field safety corrective actions must be reported through the vigilance system within defined deadlines.

Connected electronic devices face particular pressure here. Software changes must be evaluated for regulatory significance, since a modification affecting safety or performance may require a new conformity assessment, while a security patch that leaves the intended purpose untouched normally does not. Vulnerabilities discovered after release require a documented response, and manufacturers must plan for the security of devices whose service lives outlast the platforms they run on. Where such a device also falls within the Cyber Resilience Act, the two regimes must be reconciled rather than treated in isolation.

Restricted Substances

Directive 2011/65/EU, commonly called RoHS 2, restricts hazardous substances in electrical and electronic equipment. Ten substances are restricted: lead, mercury, hexavalent chromium, polybrominated biphenyls, and polybrominated diphenyl ethers at a maximum concentration of 0.1 percent by weight in homogeneous material, cadmium at 0.01 percent, and the four phthalates DEHP, BBP, DBP, and DIBP at 0.1 percent. Delegated Directive (EU) 2015/863 added the phthalates, applicable from 22 July 2019 and from 22 July 2021 for medical devices and monitoring and control instruments.

The threshold applies to homogeneous material, not to the component or the product, which is the point most often misunderstood. A homogeneous material is one that cannot be mechanically disjointed into different materials, so the tin coating on a lead frame, the insulation on a wire, and the solder joint on a board are each assessed separately. The directive covers eleven categories, from large and small household appliances through information technology and telecommunications equipment, lighting, tools, toys, medical devices, and monitoring and control instruments to an open category 11 covering other electrical and electronic equipment, which since 22 July 2019 has made scope effectively universal for products that depend on electric currents or electromagnetic fields for at least one intended function. Article 4(4) exempts cables and spare parts used for the repair, reuse, updating of functionality, or upgrading of capacity of equipment placed on the market before the relevant restriction dates for its category.

Exemptions Framework

Annexes III and IV list exemptions granted where substitution is scientifically or technically impracticable, where the reliability of substitutes cannot be assured, or where the total negative impacts of substitution would outweigh the benefits. Annex III applies generally and Annex IV applies specifically to medical devices and monitoring and control instruments. Familiar examples include lead in high melting temperature solders, lead in electronic ceramic parts such as piezoelectric devices, lead as an alloying element in steel, aluminum, and copper within stated limits, mercury in specific lamp types, and hexavalent chromium in absorption refrigerators.

Exemptions carry expiry dates: a maximum validity of five years for categories 1 to 7, 10, and 11, and seven years for categories 8 and 9. Renewal requires an application at least eighteen months before expiry, supported by evidence that the original justification still holds. Where an application is lodged in time, the exemption remains valid until a decision is taken. Manufacturers relying on exemptions should therefore maintain a register mapping each exemption to the parts that depend on it, so that a non-renewal triggers a redesign program with adequate lead time rather than an emergency.

Compliance Documentation

RoHS requires technical documentation following the Module A pattern: a general product description, design and manufacturing information, a bill of materials mapped to restricted substance status, supplier declarations and material declarations, analytical test reports where used, and a description of the process by which the manufacturer assures ongoing conformity. Documentation must be kept for ten years after the last unit is placed on the market.

Supply chain control does most of the work. Full material declarations, ideally in an industry-standard exchange format, should state restricted substance content at homogeneous material level, and supplier agreements should oblige notification of any change in materials or manufacturing location. Verification testing is applied on a risk basis, using X-ray fluorescence screening as a first filter and wet chemical methods for confirmation and for substances that screening cannot resolve; the IEC 62321 series defines the analytical procedures. Substitutions by a supplier, second-source components, and changes in plating or solder chemistry are the usual sources of nonconformity, so change control matters more than one-time testing.

CE Marking Requirements

RoHS 2 brought the restriction into the CE marking framework, so a product's CE marking now signifies RoHS conformity alongside safety and EMC conformity. A RoHS EU Declaration of Conformity is required, though it is normally combined with the declarations for other applicable acts in a single document. Conformity assessment uses Module A, internal production control.

The consequence is that RoHS enforcement follows the ordinary market surveillance route. Authorities may demand the technical file, take samples, and test them, and non-conformity can lead to withdrawal, recall, and penalties set by national law. Because analytical testing gives an unambiguous result, RoHS is one of the easier requirements for an authority to enforce and one of the more frequently enforced. Robust supplier documentation and a defensible sampling programme are the practical defense.

Registration, Evaluation, Authorization, and Restriction

Regulation (EC) No 1907/2006 is the Union's general framework for chemical substances. It is aimed chiefly at manufacturers and importers of substances, but it reaches electronics manufacturers through the rules on articles, through restrictions, and through the duty to communicate information about substances of very high concern. REACH and RoHS overlap but are not the same: RoHS restricts ten substances in equipment, while REACH governs a growing and open-ended population of substances across all products.

Four mechanisms give the regulation its name. Registration requires manufacturers and importers of substances at or above one tonne per year to submit a dossier to the European Chemicals Agency. Evaluation allows ECHA and member states to examine dossiers and substances. Authorization, through Annex XIV, makes the continued use of listed substances of very high concern conditional on a specific authorization. Restriction, through Annex XVII, prohibits or limits manufacture, placing on the market, or use. Electronics manufacturers encounter the regulation mainly through the last two, and through the article-level communication duties described below.

Substances of Very High Concern (SVHCs)

Substances of very high concern are those with serious and often irreversible effects: carcinogens, mutagens, and reproductive toxicants; persistent, bioaccumulative, and toxic substances; very persistent and very bioaccumulative substances; and substances of equivalent concern such as endocrine disruptors and respiratory sensitizers. ECHA maintains the Candidate List, updated roughly twice a year, which has grown steadily since 2008 and now contains well over two hundred entries.

Listing triggers immediate duties for articles containing the substance above 0.1 percent by weight. The threshold is calculated per article, and following the Court of Justice's ruling in case C-106/14 the calculation applies to each article incorporated into a complex product rather than to the assembled whole, so a connector or a cable inside an appliance is assessed in its own right. Suppliers must give recipients information sufficient for safe use, at minimum the substance name, and must supply the same information to a consumer on request free of charge within 45 days. Since 5 January 2021, suppliers of such articles must also notify the SCIP database maintained by ECHA, so that waste operators can identify hazardous substances in products reaching end of life.

Restrictions Affecting Electronics

Annex XVII restrictions bear on electronics in several places. Lead restrictions extend to applications beyond the reach of RoHS. Cadmium is restricted in plastics, coatings, and brazing fillers. Nickel release is limited for items in prolonged contact with skin, which affects wearables, watch bodies, and metal housings. Certain phthalates are restricted in toys and childcare articles. Restrictions on brominated flame retardants and on short-chain chlorinated paraffins affect polymer selection for enclosures and cable sheathing.

The most consequential development in progress is the proposal for a broad restriction on per- and polyfluoroalkyl substances, submitted by five national authorities and under assessment by ECHA's scientific committees. Its eventual scope matters to electronics because fluoropolymers appear in wire insulation, printed circuit board laminates, seals, and semiconductor manufacturing. Because restrictions are added and amended continually, compliance depends on monitoring rather than on a one-time review, and industry associations and ECHA's own registry of restriction intentions are the practical sources.

Compliance Strategies

Effective compliance is a supply chain discipline. Material declarations should cover REACH restricted substances and Candidate List entries alongside RoHS data, so that one data collection exercise serves both. Purchase agreements should carry substance compliance clauses and an obligation to notify changes. Each Candidate List update should trigger a screen of the bill of materials against the new entries, and testing should be reserved for materials and suppliers where declaration quality is doubtful.

Records should include supplier declarations, any test reports, the substance screening results, SCIP notification references, and evidence that the consumer request process works. REACH does not lead to CE marking, and there is no REACH declaration of conformity, but its obligations interlock with RoHS, with the WEEE regime through SCIP, and with the ecodesign rules on material information. Building one material compliance system rather than several parallel ones avoids duplicated effort and contradictory records.

Producer Responsibility

Directive 2012/19/EU establishes extended producer responsibility for waste electrical and electronic equipment. A producer is whoever first places equipment on the market of a member state under its own name or trademark, whether as manufacturer, importer, or reseller, and the definition is national: placing equipment on the market in six member states makes an undertaking a producer six times over. Since 15 August 2018 the directive has operated on open scope, organized into six categories, so equipment is covered unless specifically excluded.

Producer obligations include registering with the national register in each member state before supplying equipment there, financing the collection, treatment, recovery, and environmentally sound disposal of the resulting waste, providing a financial guarantee for household equipment covering the cost of managing it at end of life, reporting quantities placed on the market and collected, and supplying treatment information. Distance sellers supplying consumers in another member state must either register there or appoint an authorized representative for WEEE purposes. Most producers discharge these duties by joining a collective scheme, which is administratively simpler and, for smaller volumes, considerably cheaper than individual compliance.

Collection and Recovery Targets

Since 2019 the collection target has been 65 percent of the average weight of equipment placed on the market in the three preceding years, or alternatively 85 percent of the waste equipment generated in the member state's territory. Recovery targets are set by category in Annex V: 85 percent recovered and 80 percent prepared for reuse and recycled for temperature exchange equipment and large equipment, 80 percent and 70 percent for screens and monitors, 75 percent and 55 percent for small equipment and small IT and telecommunications equipment, and 80 percent recycled for lamps.

The directive also pushes design decisions upstream. Member states must encourage design and production that facilitates dismantling and the recovery of components and materials, and must not allow design features to prevent reuse unless they offer overriding advantages. Producers must supply treatment facilities with information identifying the components and materials present and the location of hazardous substances, normally within one year of a new type being placed on the market. In practice this means fastener choice, adhesive use, battery accessibility, and material marking all have regulatory as well as engineering consequences.

Registration and Reporting

Registration precedes market entry in every member state, and national registers record the producer's identity, the categories it supplies, and its compliance arrangements. The application typically requires company identification, category classification, expected or actual volumes by weight, and evidence of scheme membership or a financial guarantee. Registers vary considerably in their fees, reporting frequency, and category definitions, which is a persistent source of friction for producers selling across the Union.

Reporting covers quantities placed on the market by category and, for individually complying producers, quantities collected and treated. This data feeds the calculation of national collection rates. The crossed-out wheeled bin symbol must be marked on equipment to tell users that it must not be discarded with unsorted municipal waste; EN 50419 specifies the symbol's form, minimum size, and durability, and permits marking on the packaging or documentation only where the equipment is too small to carry it. A date marking or the symbol's own bar convention identifies equipment placed on the market after 13 August 2005, which distinguishes new from historical waste for financing purposes.

Compliance Schemes

Most producers join a collective producer responsibility organization, which pools obligations, manages registration and reporting, funds collection networks, and contracts treatment capacity. Fees generally scale with the weight placed on the market and vary by category, since the cost of treating a refrigerator differs sharply from that of treating a keyboard. Some schemes apply eco-modulated fees that reward durability and recyclability. Selecting a scheme means weighing geographic coverage, fee structure, reporting burden, and financial stability.

Individual compliance remains possible where a producer establishes its own take-back and treatment arrangements, and it can suit manufacturers with established service networks or business-to-business channels where equipment returns naturally at end of life. It requires demonstrating collection performance comparable to the collective route and providing an equivalent financial guarantee. Whichever route is taken, legal responsibility stays with the producer: joining a scheme delegates the work, not the liability, and a scheme's failure to meet targets can still expose its members.

Scope and Producer Obligations

Regulation (EU) 2023/1542 replaced the Batteries Directive 2006/66/EC and has applied since 18 February 2024, with individual requirements phasing in over the following years. It covers all batteries placed on the Union market, organized into portable batteries, batteries for light means of transport, starting, lighting, and ignition batteries, industrial batteries, and electric vehicle batteries. Unlike the directive it replaced, it is a product regulation as well as a waste regulation: batteries carry CE marking, and their performance, durability, and material content are regulated alongside their end-of-life management.

Producer responsibility obligations mirror the WEEE pattern, with national registration, financing of collection and treatment, and reporting. Collection targets for portable batteries rise to 63 percent by the end of 2027 and 73 percent by the end of 2030, with separate targets for batteries from light means of transport. Recycling efficiency targets and mandatory recycled content thresholds for cobalt, lead, lithium, and nickel apply on their own timetables. Manufacturers who integrate cells rather than make them still carry duties, because incorporating a battery into an appliance does not transfer the battery's own compliance status.

Design and Information Requirements

The requirement with the widest design consequences is removability and replaceability. From 18 February 2027, portable batteries incorporated in appliances must be readily removable and replaceable by the end user, using commercially available tools and without specialized tooling, heat, or solvents, unless a narrow derogation applies for equipment designed to operate in water or where continuity of power supply is essential. Batteries for light means of transport must be replaceable by an independent professional. Designers of consumer products should treat adhesive-mounted cells and welded battery assemblies as legacy approaches.

Information requirements are equally substantial. Batteries must carry capacity, chemistry, and separate collection markings, and a carbon footprint declaration applies progressively to electric vehicle, industrial, and light means of transport batteries. From 18 February 2027, a digital battery passport accessible through a QR code is required for light means of transport batteries, industrial batteries above 2 kWh, and electric vehicle batteries, carrying model and unit level data on composition, performance, durability, and recycled content. The battery passport is the first operational instance of the digital product passport concept that the Ecodesign for Sustainable Products Regulation will extend to other product groups.

Energy-Related Products Framework

Directive 2009/125/EC established the framework under which the Commission adopts product-specific implementing regulations setting mandatory requirements for energy-related products. The framework itself imposes nothing; the implementing regulations do. Their requirements fall into two kinds: performance requirements such as minimum efficiency or maximum standby power, and information requirements such as declared values, technical parameters, and instructions.

Regulation (EU) 2024/1781, the Ecodesign for Sustainable Products Regulation, entered into force in July 2024 and will progressively replace the directive. It widens the framework beyond energy to durability, reliability, reparability, upgradability, recyclability, recycled content, and the presence of substances of concern, and it applies to almost all physical goods rather than to energy-related products alone. Existing ecodesign implementing regulations remain in force until they are replaced by measures adopted under the new framework, so for the present both instruments are live.

Specific Product Requirements

The implementing regulations that matter most to electronics are worth naming. Regulation (EU) 2019/1782 sets efficiency requirements for external power supplies at defined load points and caps no-load consumption. Regulation (EU) 2019/424 covers servers and data storage products, addressing idle power, efficiency at defined operating states, material efficiency, and firmware and secure data deletion functionality. Regulation (EU) 2019/2021 covers electronic displays, setting energy efficiency indices, limits on power in on and standby modes, and requirements for the availability of spare parts and repair information. Horizontal standby requirements cap off-mode and standby power for most electrical equipment at well under one watt, with a separate allowance for networked standby.

Regulation (EU) 2023/1670 illustrates how far the requirements now reach into design. Applying from 20 June 2025 to smartphones, feature phones, cordless phones, and slate tablets, it requires resistance to accidental drops, scratches, dust, and water; batteries that withstand at least 800 full charge and discharge cycles while retaining at least 80 percent of rated capacity; availability of listed spare parts to professional repairers, and for several parts to end users, delivered within five to ten working days and supplied for seven years after the model ceases to be placed on the market; and operating system updates for at least five years after that point. Requirements generally phase in over successive tiers, and conformity rests on the technical documentation, declared values, and the verification tolerances specified in the regulation, which authorities apply when testing samples.

Energy Labeling

Regulation (EU) 2017/1369 governs energy labels and works in tandem with ecodesign requirements: ecodesign removes the worst performers from the market, and the label pulls demand toward the best. Labels use a closed A to G scale, the rescaling that replaced the A+ to A+++ inflation of the earlier system, and rescaling is repeated once enough models reach the top classes. Electronic displays, televisions, and, since June 2025, smartphones and tablets carry labels; the mobile device label adds a repairability class from A to E, battery endurance, drop reliability, and ingress protection rating alongside the energy class.

Before a covered model may be placed on the market, the supplier must register it in the European Product Registry for Energy Labelling, uploading the label, the product information sheet, and the technical documentation. Dealers must display the label in physical shops and show the energy class and the range of available classes in visual advertisements and in distance selling, including online listings. Suppliers must provide labels free of charge and in printed form on request. These obligations are enforced actively, and failure to register in the product registry is a straightforward finding for a market surveillance authority to make.

Equipment for Explosive Atmospheres

Directive 2014/34/EU, applicable since 20 April 2016, covers equipment and protective systems intended for use in potentially explosive atmospheres, together with safety, controlling, and regulating devices located outside such atmospheres but required for the safe functioning of equipment inside them. An explosive atmosphere is a mixture of air with flammable gases, vapors, mists, or dusts in which combustion, once ignited, propagates through the whole mixture. Petrochemical plants, paint shops, grain handling, flour milling, woodworking, pharmaceutical production, and mining all rely on compliant equipment. A companion instrument, Directive 1999/92/EC, places duties on employers regarding the workplace itself, and the two are frequently confused.

Equipment is divided into group I for mines susceptible to firedamp, with categories M1 and M2, and group II for other environments, with categories 1, 2, and 3. Category 1 provides a very high level of protection for Zone 0 (gas) or Zone 20 (dust), where an explosive atmosphere is present continuously, for long periods, or frequently. Category 2 provides a high level for Zone 1 or Zone 21, where an explosive atmosphere is likely to occur in normal operation. Category 3 provides a normal level for Zone 2 or Zone 22, where an explosive atmosphere is unlikely and, if it occurs, persists only briefly. Categories 1 and 2 must remain safe with two faults and one fault respectively, which is what drives the redundancy in their design.

Protection Concepts

Several protection concepts prevent ignition by different means, each with its own standard and marking code. Intrinsic safety (Ex ia, ib, ic) limits the energy available in a circuit so that neither sparking nor surface heating can ignite the atmosphere, and is the concept of choice for instrumentation and low-power electronics because it permits live maintenance. Flameproof enclosure (Ex d) contains an internal explosion and cools the escaping gases through defined flame paths so that ignition cannot propagate outward. Increased safety (Ex e) applies construction measures that eliminate arcs, sparks, and excessive temperatures altogether. Encapsulation (Ex m) embeds parts in compound so the atmosphere cannot reach them.

Other concepts include pressurization (Ex p), which maintains a protective gas above ambient pressure to exclude the atmosphere; oil immersion (Ex o); powder filling (Ex q); and non-sparking or restricted-breathing construction (Ex n, now largely expressed as Ex ec and Ex nR) for Zone 2 only. Selection depends on the zone, the power involved, maintenance access, and cost. The EN IEC 60079 series specifies the requirements: part 0 for general requirements, part 1 for flameproof enclosures, part 7 for increased safety, part 11 for intrinsic safety, part 18 for encapsulation, part 2 for pressurization, and parts 25 and 26 for intrinsically safe systems and very high protection equipment. Marking must also state the gas group (IIA, IIB, or IIC, with IIC covering hydrogen and acetylene and demanding the tightest construction) and the temperature class from T1 at 450 °C down to T6 at 85 °C, or the maximum surface temperature for dust.

Conformity Assessment

The assessment route follows the category. Category M1 and category 1 equipment requires EU-type examination by a notified body (Module B) combined with either production quality assurance (Module D) or product verification (Module F). Category M2 and category 2 electrical equipment and internal combustion engines require EU-type examination combined with conformity to type based on internal production control plus supervised product testing (Module C1) or on product quality assurance (Module E); other category 2 equipment follows internal control of production with the technical documentation deposited with a notified body. Category 3 equipment uses internal production control (Module A) with documentation retained by the manufacturer. Protective systems and safety devices are assessed as though they were category 1.

Technical documentation must show how the essential health and safety requirements of Annex II are met, covering the ignition hazard assessment, drawings and circuit diagrams, calculations such as creepage, clearance, and energy limitation for intrinsically safe circuits, test reports, and the production controls that preserve the certified construction. The CE marking is accompanied by the notified body's identification number where that body supervises production, the distinctive Ex hexagon, and the marking string giving the equipment group, category, atmosphere letter (G for gas, D for dust), protection concept, gas or dust group, temperature class, and equipment protection level. Instructions must include everything needed for safe installation, use, maintenance, and repair, since an uncontrolled repair can invalidate the protection concept entirely.

IECEx Scheme Relationship

The IECEx scheme provides international certification for explosion-protected equipment based on IEC standards, and comprises schemes for equipment, for service facilities that repair and overhaul such equipment, and for personnel competence. IECEx certification does not by itself satisfy ATEX, because ATEX is Union law with its own essential requirements and conformity assessment procedures, but the technical overlap is substantial: the IEC 60079 series underpins both the IECEx scheme and the harmonized EN IEC 60079 standards cited for ATEX.

In practice manufacturers pursue both, and the IECEx test report is normally accepted by an ATEX notified body as the technical basis for its own assessment, with additional work confined to the points where the European versions deviate. The degree of reuse varies by body and by product, so it is worth agreeing the approach with the notified body before testing rather than after. Planning a single test campaign that satisfies both schemes is one of the more reliable cost savings available in this field.

Market Surveillance Regulation

Regulation (EU) 2019/1020, applicable since 16 July 2021, strengthened enforcement of Union product legislation and closed a gap that direct-to-consumer imports had opened. Its Article 4 is the central provision: for a long list of harmonization acts, including the Low Voltage, EMC, Radio Equipment, RoHS, and ATEX regimes, a product may be placed on the market only if an economic operator established in the Union is responsible for it. That operator may be the manufacturer, an importer, an authorized representative, or a fulfilment service provider, and its name and address must appear on the product, its packaging, the parcel, or an accompanying document.

The regulation also equips authorities with stronger powers: to acquire samples under cover identity, to require information from operators including online interfaces, to enter premises, and to order the removal of content from an online interface where other measures fail. The Safety Gate rapid alert system circulates information on dangerous products between member states, and the ICSMS system supports information exchange between authorities. Customs authorities may suspend release of products that appear non-compliant. Penalties are set nationally and vary widely, but withdrawal, recall, and prohibition of sale apply across the Union once a member state's measure is confirmed.

Authorized Representatives

An authorized representative is a person established in the Union with a written mandate from the manufacturer to perform specified tasks. The tasks that may be delegated are limited: keeping the declaration of conformity and technical documentation available for authorities, providing information and documentation on request, and cooperating on corrective action. The tasks that may not be delegated are equally important: the manufacturer cannot transfer the duty to design and manufacture in conformity, to compile the technical file, or to carry out the conformity assessment.

The Article 4 responsible person under Regulation (EU) 2019/1020 is a broader concept, applying regardless of whether the underlying act requires an authorized representative, and its identification must be visible to the market. Manufacturers established outside the Union should be deliberate about who fills this role, since an appointed representative bears real obligations and a nominal appointment offers no protection. Where several importers handle the same product, clarity about which entity is the responsible operator prevents a compliance question from stalling at the border.

Practical Compliance Strategies

Effective compliance starts with a scoping exercise, because almost every electronic product engages several acts at once. A mains-powered wireless consumer device typically falls under the Radio Equipment Directive, RoHS, WEEE, the Batteries Regulation if it contains cells, an ecodesign measure if it belongs to a regulated category, the General Product Safety Regulation for residual risks, and, from December 2027, the Cyber Resilience Act. Mapping the applicable acts before design freeze is far cheaper than discovering an obligation during certification.

The supporting practices are unglamorous but decisive. Keep the technical file as a living document under version control rather than assembling it before shipment. Bind supplier obligations contractually and re-verify on change. Run a change control process that asks explicitly whether a modification affects conformity, and treat component substitutions as changes. Assign named owners for each register and database entry, since EPREL, SCIP, national WEEE and battery registers, and EUDAMED all have their own renewal and reporting rhythms. Audit against the technical file periodically, on the assumption that an authority will eventually ask for it.

Cyber Resilience Act

Regulation (EU) 2024/2847, the Cyber Resilience Act, establishes horizontal cybersecurity requirements for products with digital elements, meaning any software or hardware product whose intended or reasonably foreseeable use includes a data connection. It requires secure-by-design development, a product free of known exploitable vulnerabilities at the time of placing on the market, secure default configuration, and coordinated vulnerability handling with security updates provided throughout the support period. Article 13(8) requires the manufacturer to determine a support period that reflects how long the product is expected to be in use, taking into account reasonable user expectations, the nature of the product, and any Union law that fixes a product lifetime. That period must be at least five years, and where the product is expected to be in use for less than five years, the support period must correspond to the expected use time.

Products are grouped by criticality. The default class is self-assessed; important products in classes I and II, such as password managers, network management systems, microcontrollers with security-related functions, and industrial firewalls, face progressively stricter routes with third-party assessment required in defined cases; critical products may be required to hold a European cybersecurity certificate. Documentation must include a cybersecurity risk assessment and a software bill of materials covering at least the top-level dependencies. Manufacturers must report actively exploited vulnerabilities and severe incidents through a single reporting platform operated by ENISA together with national CSIRTs, with an early warning within 24 hours, a fuller notification within 72 hours, and a final report within 14 days.

The act entered into force on 10 December 2024. Reporting obligations apply from 11 September 2026, the provisions on notification of conformity assessment bodies from 11 June 2026, and the remaining obligations from 11 December 2027. The practical consequence for electronics manufacturers is that cybersecurity joins safety and EMC as a design-phase discipline with documentary obligations, and that the support period commitment must be reconciled with component and platform lifecycles chosen years earlier.

AI Act Implications

Regulation (EU) 2024/1689, the Artificial Intelligence Act, entered into force on 1 August 2024 and applies in stages. Prohibitions on unacceptable practices, including untargeted scraping of facial images, social scoring, and specified uses of biometric categorization and real-time remote biometric identification, together with AI literacy duties, have applied since 2 February 2025. Obligations for providers of general-purpose AI models and the governance and penalty provisions applied from 2 August 2025, and the Article 50 transparency duties, which cover disclosure that a user is interacting with an AI system and the marking of synthetic content, apply from 2 August 2026. The high-risk timetable, by contrast, has moved. Regulation (EU) 2026/1744, the digital omnibus amendment published in the Official Journal on 24 July 2026, deferred the obligations for stand-alone high-risk systems listed in Annex III from 2 August 2026 to 2 December 2027, and the obligations for high-risk AI used as a safety component of products covered by other Union harmonization legislation, such as machinery, medical devices, radio equipment, and toys, from 2 August 2027 to 2 August 2028. The stated reason is the late arrival of the harmonized standards on which conformity assessment depends. Because this timetable has already shifted once, confirm the dates against the consolidated text before relying on them.

For electronics manufacturers the significant interaction is that second route. Where an AI system is a safety component of a product already subject to CE marking, the AI Act's requirements on risk management, data governance, technical documentation, logging, transparency, human oversight, accuracy, robustness, and cybersecurity are assessed within the existing conformity assessment procedure for that product rather than through a separate one. Governance rests with an AI Office within the Commission and a European Artificial Intelligence Board of member state representatives, and penalties for prohibited practices reach the higher of 35 million euro or 7 percent of worldwide annual turnover. Products embedding perception, classification, or decision models should be assessed early against the classification rules, because a high-risk determination reshapes the development process rather than merely adding paperwork.

Sustainable Products Regulation

The Ecodesign for Sustainable Products Regulation works through delegated acts for specific product groups, so its practical effect arrives group by group rather than all at once. The first working plan, the Commission communication Ecodesign for Sustainable Products and Energy Labelling Working Plan 2025-2030 adopted on 16 April 2025, prioritizes four final product groups, namely textiles with a focus on apparel, furniture, tires, and mattresses, and two intermediate product groups, iron and steel and aluminum. It also sets two horizontal measures, one on reparability including a reparability score and one on recycled content and recyclability of electrical and electronic equipment, and it carries forward sixteen energy-related product measures from the 2022 to 2024 working plan, among them displays and electric vehicle chargers. Information and communication technology products are not listed as a group of their own; the plan covers them through the two horizontal measures and, for some products, through that energy-related work.

Two features will change how products are documented. The digital product passport will carry standardized information accessible through a data carrier on the product, covering composition, durability, repair, and end-of-life handling, with a central registry supporting it; the battery passport under Regulation (EU) 2023/1542 is the first instance to take effect. Separately, the regulation prohibits the destruction of unsold consumer products in defined categories and requires disclosure of destruction volumes. Manufacturers should follow the working plan and the preparatory studies for their product groups, since the consultation stage is the point at which requirements can still be influenced and, equally important, the point at which lead times for redesign become visible.