Consumer electronics & IoT
Ship connected consumer products into the US, EU and UK
IEC 62368-1 safety, FCC equipment authorization, EU RED including EN 18031 cybersecurity, EMC, and Cyber Resilience Act readiness for smart devices, wearables and IoT.
What this engagement covers
A connected device usually needs electrical safety, EMC, radio and now cybersecurity evidence before launch. We build one test and documentation plan across IEC 62368-1, FCC Part 15, and the EU Radio Equipment Directive — including its cybersecurity requirements under Delegated Regulation (EU) 2022/30, mandatory since 1 August 2025, with the EN 18031 series as harmonised standards. We also prepare you for the EU Cyber Resilience Act: its vulnerability and incident reporting duties apply from 11 September 2026, and its main obligations from 11 December 2027.
Best fit for
- Smart home, wearables and audio/video brands
- IoT device makers using Wi-Fi, Bluetooth, Thread/Zigbee or cellular modules
- Hardware start-ups preparing a first US / EU launch
- Brands sourcing from ODMs who need to check supplier test reports
What's included
- Applicability map by SKU — safety, EMC, radio, cyber, materials
- IEC 62368-1 hazard-based safety review and test coordination
- FCC Part 15 planning — SDoC or certification through a TCB
- RED essential requirements, including Article 3(3)(d)(e)(f) cybersecurity
- EN 18031-1 / -2 / -3 gap assessment and evidence
- CRA readiness — product classification, vulnerability handling, SBOM, reporting process
- Labelling, user information and Declaration of Conformity review
Product types we support
Scope changes by product architecture — these are the classes we regularly take through this pathway.
Smart home devices
Hubs, cameras, locks, plugs, thermostats
Wearables
Watches, trackers, earbuds — RED cyber often includes EN 18031-2
Audio / video & displays
Speakers, TVs, monitors, streaming devices
Networking equipment
Routers, mesh nodes, gateways
Chargers & power banks
USB-C PD adapters and battery packs
Connected toys & childcare
Toy safety plus RED cyber considerations
Technical categories
What RED cybersecurity (EN 18031) covers
CRA readiness workstreams
Regions & schemes
Market access is scheme-specific. We map filings and evidence to the regions you actually sell into.
United States
- •FCC Part 15 Subpart B (unintentional radiators)
- •FCC Part 15 Subpart C / E (intentional radiators)
- •SDoC or TCB certification
- •NRTL safety listing often expected by retailers
Canada
- •ISED ICES-003 / RSS standards
- •CSA / cUL safety
European Union
- •CE marking under RED 2014/53/EU (radio) or LVD + EMC
- •RED cybersecurity — Delegated Regulation (EU) 2022/30, since 1 Aug 2025
- •Cyber Resilience Act — Regulation (EU) 2024/2847
- •RoHS, WEEE and GPSR
United Kingdom
- •UKCA / CE recognition
- •PSTI product security regime
Directives & regulations
2014/53/EU — Radio Equipment Directive
Safety, EMC, radio spectrum and Article 3(3) requirements
Delegated Regulation (EU) 2022/30
Activates RED cybersecurity requirements — applies since 1 August 2025
Regulation (EU) 2024/2847 — Cyber Resilience Act
Reporting duties from 11 September 2026; main obligations from 11 December 2027
2014/35/EU LVD & 2014/30/EU EMC
For mains-powered products without radio
2011/65/EU — RoHS
Restricted substances in EEE
GPSR (EU) 2023/988
General product safety for consumer products
Key standards
| Standard | Focus |
|---|---|
| IEC / EN 62368-1 | Audio/video, information and communication technology equipment — safety |
| EN 55032 / EN 55035 | EMC emission / immunity for multimedia equipment |
| EN 300 328 / EN 301 893 | 2.4 GHz and 5 GHz wideband radio |
| EN 301 489-1 / -17 | EMC for radio equipment |
| EN 18031-1 / -2 / -3 | Common security requirements for radio equipment (RED) |
| ETSI EN 303 645 | Cyber security for consumer IoT — baseline requirements |
| 47 CFR Part 15 | FCC radio frequency devices |
Marks & program keywords
How we work
One clear path from classification to market-ready evidence.
Map
Markets, radios, data flows, and the standards that apply to each SKU
Pre-check
Design, PCB and security review before chamber time
Test
Safety, EMC, radio and cyber evidence with partner labs
Declare
DoC, FCC filing, technical file and CRA processes
Engineering notes
EN 18031 standards were cited in the Official Journal with restrictions. If your design falls into a restricted case, presumption of conformity may not apply and a notified body route may be needed — we check this early.
CRA reporting duties for actively exploited vulnerabilities and severe incidents apply from 11 September 2026, including to products already on the market. Essential requirements and conformity assessment apply from 11 December 2027.
One plan across safety, EMC, radio and cyber
RED cybersecurity evidence for EU sales
A CRA roadmap with dates
Frequently asked questions
Do I need a notified body for RED cybersecurity?
Not usually. If you apply the harmonised EN 18031 standards in full and no restriction applies, you can self-declare. Where standards are not applied in full or a restriction applies, a notified body EU-type examination is needed.
Does the CRA already apply to my product?
Partly. Since 11 September 2026 manufacturers must report actively exploited vulnerabilities and severe incidents. The security requirements, conformity assessment and CE marking under the CRA apply from 11 December 2027.
Ready to scope Consumer Electronics & IoT?
30-minute consultation with Hazloc Labs — bring your product type, target markets, and any existing reports.
Book Free CallRelated services
RF & Wireless Certification
FCC, RED, ISED, MIC, ACMA, and multi-country radio paths for modules, hosts, and custom radios — including antenna and SAR considerations.
Product Cybersecurity
EU Cyber Resilience Act, RED cybersecurity, IEC 62443, ETSI EN 303 645, and UL 2900 — threat modeling, SBOM, and evidence for market access.
EMC Compliance
Emissions and immunity strategy across residential, commercial, and industrial environments — consulting, pre-compliance, and accredited lab coordination for FCC, CE, UKCA, ISED, and global markets.