{"product_id":"red-cybersakerhet-radioleksaker-en18031-importor-2027","title":"RED cybersecurity radio-controlled toys 2026\/2027 – EN 18031, declaration of conformity \u0026 batch blocking | Word\/PDF\/Excel","description":"\u003csection lang=\"sv\" style=\"line-height:1.65;color:#173b54\"\u003e\n\u003cp\u003e\u003cstrong\u003eDo you import or manufacture radio-controlled toys, Bluetooth toys, or connected toys intended for sale in Sweden\/the EU?\u003c\/strong\u003e A toy may be subject to the cybersecurity requirements of the RED even if it \u003cem\u003edoes not\u003c\/em\u003e connect to the internet: privacy requirements may be relevant when radio equipment processes personal data, traffic data, or location data. This specialist package helps you assess actual applicability, request evidence of testing from the supplier, and decide whether to block a batch. It is not a general policy and is not a CE certificate.\u003c\/p\u003e\n\u003cp\u003e\u003cstrong\u003eRead the guide:\u003c\/strong\u003e \u003ca href=\"https:\/\/mallbutiken.se\/en\/blogs\/foretag\/cybersakerhet-radioleksaker-red-en18031-2026-2027\"\u003eCybersecurity for radio-controlled toys – RED, EN 18031 and the CRA transition\u003c\/a\u003e. It explains the rules and practical assessments.\u003c\/p\u003e\n\n\u003cp\u003e\u003cstrong\u003eCurrent regulatory framework:\u003c\/strong\u003e The RED Directive 2014\/53\/EU, together with EU Delegated Regulation (EU) 2022\/30, imposes cybersecurity requirements on relevant radio equipment on the EU market from \u003cstrong\u003e1 August 2025\u003c\/strong\u003e. Under \u003cstrong\u003eRegulation (EU) 2026\/339\u003c\/strong\u003e, the Delegated Regulation will be repealed from \u003cstrong\u003e11 December 2027\u003c\/strong\u003e, when the CRA’s main product requirements begin to apply. Market surveillance of earlier products is not automatically affected retroactively. \u003ca href=\"https:\/\/www.pts.se\/radio\/radioutrustning\/cybersakerhetskrav-for-radioutrustning\/\"\u003ePTS summarizes applicability\u003c\/a\u003e; \u003ca href=\"https:\/\/eur-lex.europa.eu\/eli\/reg_del\/2026\/339\/oj\"\u003eEU 2026\/339 specifies the transition\u003c\/a\u003e.\u003c\/p\u003e\n\n\u003cp\u003e\u003cstrong\u003eFor whom:\u003c\/strong\u003e Swedish manufacturers, importers, supplier representatives, and quality teams for radio toys, radio-controlled cars, app-connected toys, and other actual radio products in the toy category. Wholesalers who must be able to explain why a particular batch has been blocked or released may also find the documents useful.\u003c\/p\u003e\n\n\u003csection aria-label=\"01 · Package contents\" style=\"border:2px solid #bdd8e9;border-left:7px solid #1e668e;background:#f0f7fb;padding:17px 20px;margin:20px 0;border-radius:11px\"\u003e\u003ch2 style=\"margin:0 0 8px;color:#16547a\"\u003e01 · Package contents\u003c\/h2\u003e\n\n\u003cp style=\"margin:0\"\u003eFive Swedish operational templates, one Swedish user guide, and one English User Guide. All seven documents are available in editable Word\/DOCX and corresponding searchable, printable PDF formats. The package also includes a Swedish Excel register with nine tabs. \u003cstrong\u003e7 DOCX + 7 PDF + 1 XLSX = 15 internal customer files\u003c\/strong\u003e, packaged in a ZIP file upon separate activation of Digital Products.\u003c\/p\u003e\u003c\/section\u003e\n\u003csection aria-label=\"02 · What the files contain\" style=\"border:2px solid #bdd8e9;border-left:7px solid #1e668e;background:#f0f7fb;padding:17px 20px;margin:20px 0;border-radius:11px\"\u003e\u003ch2 style=\"margin:0 0 8px;color:#16547a\"\u003e02 · What the files contain\u003c\/h2\u003e\n\n\u003cp style=\"margin:0\"\u003eModel-specific regulatory assessment, internet\/data flow map, request to the supplier for EN 18031-1\/2 evidence, privacy and security test, batch block with remedial letter, and separate launch decision. The Excel file contains status lists and administrative summaries, but no pre-fabricated certificates, final legal decisions, or fictitious deadlines.\u003c\/p\u003e\u003c\/section\u003e\n\u003ch2\u003eWhat cybersecurity requirements may apply to toys?\u003c\/h2\u003e\n\n\u003cp\u003e\u003cstrong\u003eRED 3.3(d) – network protection:\u003c\/strong\u003e Applies within the relevant scope to internet-connected radio equipment, even when the internet network is accessed indirectly via another device, such as a mobile app or gateway. A simple radio toy without such internet capability should not automatically receive this classification.\u003c\/p\u003e\n\n\u003cp\u003e\u003cstrong\u003eRED 3.3(e) – personal data and privacy:\u003c\/strong\u003e May also apply to radio toys that are not internet-connected if they process personal, traffic, or location data according to the requirements of the regulatory framework. It is therefore incorrect to automatically set “not applicable” simply because the toy only uses Bluetooth or other local radio technology.\u003c\/p\u003e\n\n\u003cp\u003e\u003cstrong\u003eRED 3.3(f) – fraud protection:\u003c\/strong\u003e Covers relevant internet-connected radio equipment that enables the transfer of money, monetary value, or virtual currency. This does not routinely apply to all toys. Also check exemptions and the responsibilities of separate economic operators.\u003c\/p\u003e\n\n\u003ch2\u003eEN 18031-1 and EN 18031-2: what do they prove?\u003c\/h2\u003e\n\n\u003cp\u003eEN 18031-1:2024 is relevant to network protection (d); EN 18031-2:2024 concerns data protection and privacy (e), including relevant radio toys. EN 18031-3:2024 may become relevant in the case of a relevant payment function. \u003cstrong\u003ePTS emphasizes that the published harmonized standards have restrictions and do not always provide a full presumption of conformity.\u003c\/strong\u003e In some cases, a notified body must be used. The package does not include the licensed standard text, any laboratory tests, or any notified body statement.\u003c\/p\u003e\n\n\u003ch2\u003eAll 15 customer files\u003c\/h2\u003e\n\n\u003cdiv style=\"overflow-x:auto\"\u003e\u003ctable style=\"border-collapse:collapse;min-width:650px;width:100%\"\u003e\n\n\u003cthead\u003e\u003ctr style=\"background:#e7f0f6\"\u003e\n\n\u003cth style=\"padding:8px\"\u003eDocument\u003c\/th\u003e\n\n\u003cth style=\"padding:8px\"\u003ePractical use\u003c\/th\u003e\n\n\u003cth style=\"padding:8px\"\u003eLanguage\u003c\/th\u003e\n\n\u003cth style=\"padding:8px\"\u003eFormat\u003c\/th\u003e\n\n\n\u003c\/tr\u003e\u003c\/thead\u003e\n\n\u003ctbody\u003e\n\n\u003ctr\u003e\n\n\u003ctd style=\"border:1px solid #cedde8;padding:9px;vertical-align:top\"\u003e01 – Applicability and regulatory selection protocol\u003c\/td\u003e\n\n\u003ctd style=\"border:1px solid #cedde8;padding:9px;vertical-align:top\"\u003eIdentify model, radio interface, internet access even via gateway, data types, relevant 3.3(d\/e\/f), and EU market date.\u003c\/td\u003e\n\n\u003ctd style=\"border:1px solid #cedde8;padding:9px;vertical-align:top\"\u003eSwedish\u003c\/td\u003e\n\n\u003ctd style=\"border:1px solid #cedde8;padding:9px;vertical-align:top\"\u003eDOCX\/PDF\u003c\/td\u003e\n\n\n\u003c\/tr\u003e\n\n\u003ctr\u003e\n\n\u003ctd style=\"border:1px solid #cedde8;padding:9px;vertical-align:top\"\u003e02 – Request to supplier and chain of evidence\u003c\/td\u003e\n\n\u003ctd style=\"border:1px solid #cedde8;padding:9px;vertical-align:top\"\u003eRequest test certificate, actual firmware version, EN 18031-1\/2 evidence, deviations, and document ID.\u003c\/td\u003e\n\n\u003ctd style=\"border:1px solid #cedde8;padding:9px;vertical-align:top\"\u003eSwedish\u003c\/td\u003e\n\n\u003ctd style=\"border:1px solid #cedde8;padding:9px;vertical-align:top\"\u003eDOCX\/PDF\u003c\/td\u003e\n\n\n\u003c\/tr\u003e\n\n\u003ctr\u003e\n\n\u003ctd style=\"border:1px solid #cedde8;padding:9px;vertical-align:top\"\u003e03 – Security testing and privacy\u003c\/td\u003e\n\n\u003ctd style=\"border:1px solid #cedde8;padding:9px;vertical-align:top\"\u003eControls for pairing, access, encryption, data logging, updates, and test evidence.\u003c\/td\u003e\n\n\u003ctd style=\"border:1px solid #cedde8;padding:9px;vertical-align:top\"\u003eSwedish\u003c\/td\u003e\n\n\u003ctd style=\"border:1px solid #cedde8;padding:9px;vertical-align:top\"\u003eDOCX\/PDF\u003c\/td\u003e\n\n\n\u003c\/tr\u003e\n\n\u003ctr\u003e\n\n\u003ctd style=\"border:1px solid #cedde8;padding:9px;vertical-align:top\"\u003e04 – Batch block and remedial letter\u003c\/td\u003e\n\n\u003ctd style=\"border:1px solid #cedde8;padding:9px;vertical-align:top\"\u003eStop internal release, request correction, collect shipping evidence, and assess any regulatory action.\u003c\/td\u003e\n\n\u003ctd style=\"border:1px solid #cedde8;padding:9px;vertical-align:top\"\u003eSwedish\u003c\/td\u003e\n\n\u003ctd style=\"border:1px solid #cedde8;padding:9px;vertical-align:top\"\u003eDOCX\/PDF\u003c\/td\u003e\n\n\n\u003c\/tr\u003e\n\n\u003ctr\u003e\n\n\u003ctd style=\"border:1px solid #cedde8;padding:9px;vertical-align:top\"\u003e05 – RED–CRA release decision\u003c\/td\u003e\n\n\u003ctd style=\"border:1px solid #cedde8;padding:9px;vertical-align:top\"\u003eDocument separate approver, remaining risk, evidence, and which regulation applies to the batch.\u003c\/td\u003e\n\n\u003ctd style=\"border:1px solid #cedde8;padding:9px;vertical-align:top\"\u003eSwedish\u003c\/td\u003e\n\n\u003ctd style=\"border:1px solid #cedde8;padding:9px;vertical-align:top\"\u003eDOCX\/PDF\u003c\/td\u003e\n\n\n\u003c\/tr\u003e\n\n\u003ctr\u003e\n\n\u003ctd style=\"border:1px solid #cedde8;padding:9px;vertical-align:top\"\u003e06 – Swedish user guide\u003c\/td\u003e\n\n\u003ctd style=\"border:1px solid #cedde8;padding:9px;vertical-align:top\"\u003eStep-by-step, risk assessment, negative applicability scenarios, and legal sources.\u003c\/td\u003e\n\n\u003ctd style=\"border:1px solid #cedde8;padding:9px;vertical-align:top\"\u003eSwedish\u003c\/td\u003e\n\n\u003ctd style=\"border:1px solid #cedde8;padding:9px;vertical-align:top\"\u003eDOCX\/PDF\u003c\/td\u003e\n\n\n\u003c\/tr\u003e\n\n\u003ctr\u003e\n\n\u003ctd style=\"border:1px solid #cedde8;padding:9px;vertical-align:top\"\u003e07 – English User Guide\u003c\/td\u003e\n\n\u003ctd style=\"border:1px solid #cedde8;padding:9px;vertical-align:top\"\u003eInstructions for use of the five Swedish forms; not English translations of them.\u003c\/td\u003e\n\n\u003ctd style=\"border:1px solid #cedde8;padding:9px;vertical-align:top\"\u003eEnglish\u003c\/td\u003e\n\n\u003ctd style=\"border:1px solid #cedde8;padding:9px;vertical-align:top\"\u003eDOCX\/PDF\u003c\/td\u003e\n\n\n\u003c\/tr\u003e\n\n\u003ctr\u003e\n\n\u003ctd style=\"border:1px solid #cedde8;padding:9px;vertical-align:top\"\u003e08 – Excel register\u003c\/td\u003e\n\n\u003ctd style=\"border:1px solid #cedde8;padding:9px;vertical-align:top\"\u003eNine tabs with administrative summaries, status lists, and source registers.\u003c\/td\u003e\n\n\u003ctd style=\"border:1px solid #cedde8;padding:9px;vertical-align:top\"\u003eSwedish\u003c\/td\u003e\n\n\u003ctd style=\"border:1px solid #cedde8;padding:9px;vertical-align:top\"\u003eXLSX\u003c\/td\u003e\n\n\n\u003c\/tr\u003e\n\n\n\u003c\/tbody\u003e\n\n\n\u003c\/table\u003e\u003c\/div\u003e\n\n\u003ch2\u003eExcel with nine tabs\u003c\/h2\u003e\n\n\u003cp\u003e\u003cstrong\u003eOverview, Models, Applicability, Supplier Evidence, Testing, Batch Blocks, Decisions, Actions, and Sources.\u003c\/strong\u003e Each actual model is assigned its own ID. Register entries may show, among other things, open actions, missing evidence, deviating test results, and blocked batches. Seven summary metrics have been tested with an empty register and one completed test case. The customer file is then reset to \u003cstrong\u003e0 registered cases\u003c\/strong\u003e – no fictitious product IDs or actual test certificates are included. The status “Released” is a manual entry and does not certify CE compliance.\u003c\/p\u003e\n\n\u003ch2\u003eHow to use the package\u003c\/h2\u003e\n\n\u003col\u003e\n\n\u003cli\u003e\n\n\u003cstrong\u003eInventory the radio toy.\u003c\/strong\u003e Enter model\/SKU, firmware, radio components, app\/gateway, manufacturer, importer, batch, and market date.\u003c\/li\u003e\n\n\u003cli\u003e\n\n\u003cstrong\u003eTest the correct regulation.\u003c\/strong\u003e Investigate direct\/indirect internet connection, relevant data types, any payment flow, and actual exemptions. Document 3.3(d), (e), and (f) separately.\u003c\/li\u003e\n\n\u003cli\u003e\n\n\u003cstrong\u003eRequest the evidence.\u003c\/strong\u003e Require authentic supplier reports, the correct EN 18031 version, report ID, standard restrictions, any notified body involvement, and the actual firmware version.\u003c\/li\u003e\n\n\u003cli\u003e\n\n\u003cstrong\u003eTest and document.\u003c\/strong\u003e Check access, pairing, data handling, secure updates, and actual evidence references. Have the technical manager verify – not just administer.\u003c\/li\u003e\n\n\u003cli\u003e\n\n\u003cstrong\u003eBlock the affected batch in case of deficiency.\u003c\/strong\u003e Record the actual inventory stop and any external notification based on a correct legal assessment.\u003c\/li\u003e\n\n\u003cli\u003e\n\n\u003cstrong\u003eMake a decision and choose the correct time period.\u003c\/strong\u003e Separate products that were first placed on the EU market before 11 December 2027 from later product models and CRA requirements.\u003c\/li\u003e\n\n\n\u003c\/ol\u003e\n\n\u003ch2\u003eFive relevant practical situations\u003c\/h2\u003e\n\n\u003cp\u003e\u003cstrong\u003eBluetooth toy without internet:\u003c\/strong\u003e investigate 3.3(e) in the case of relevant processing of personal\/traffic\/location data, but do not make an automatic 3.3(d) claim.\u003c\/p\u003e\n\n\u003cp\u003e\u003cstrong\u003eApp-connected Wi-Fi toy:\u003c\/strong\u003e investigate both 3.3(d) and (e) with clear evidence of data flow, account, and remote connection.\u003c\/p\u003e\n\n\u003cp\u003e\u003cstrong\u003eRadio-controlled car without personal data:\u003c\/strong\u003e document the negative applicability assessment objectively. Other RED and toy requirements still apply in relevant parts.\u003c\/p\u003e\n\n\u003cp\u003e\u003cstrong\u003eThe supplier sends a generic “EN 18031 compliant”:\u003c\/strong\u003e request the actual model, version, test ID, standard restrictions, and assess whether the evidence provides any relevant presumption at all.\u003c\/p\u003e\n\n\u003cp\u003e\u003cstrong\u003eNew batch from 11 December 2027:\u003c\/strong\u003e\u003c\/p\u003e perform a specific CRA assessment according to (EU) 2024\/2847; do not use the repealed 2022\/30 as a new basis for obligation.\n\u003ch2\u003eFrequently asked questions\u003c\/h2\u003e\n\n\u003ch3\u003eMust all radio-controlled toys have EN 18031-1?\u003c\/h3\u003e\n\n\u003cp\u003eNo. EN 18031-1 refers to network protection for internet-connected radio equipment. First investigate whether the toy actually connects to the internet, even indirectly. Legal applicability and the selected standard must be assessed separately.\u003c\/p\u003e\n\n\u003ch3\u003eCan EN 18031-2 apply without internet?\u003c\/h3\u003e\n\n\u003cp\u003eYes, certain toys that are radio equipment may be subject to the privacy requirement 3.3(e) in the case of relevant data processing even without an internet connection. However, an automatic obligation for all toys is not claimed.\u003c\/p\u003e\n\n\u003ch3\u003eDoes a completed template mean we can CE mark the product?\u003c\/h3\u003e\n\n\u003cp\u003eNo. You must meet all applicable requirements and have actual technical documentation. An assessment by a notified body may be necessary. Templates, Word, and Excel are only work aids.\u003c\/p\u003e\n\n\u003ch3\u003eWhat applies after 10 December 2027?\u003c\/h3\u003e\n\n\u003cp\u003eRegulation (EU) 2026\/339 repeals 2022\/30 from 11 December 2027. The main requirements of the CRA will then apply. Products that were first placed on the market during the RED period can still be reviewed according to the rules in force at that time.\u003c\/p\u003e\n\n\u003ch3\u003eAre all documents in English?\u003c\/h3\u003e\n\n\u003cp\u003eNo. Five operational templates and the Excel file are in Swedish. A Swedish user guide and a separate English User Guide are included; the English guide contains instructions, not full translations of the main documents.\u003c\/p\u003e\n\n\u003ch2\u003eLegal sources and quality status\u003c\/h2\u003e\n\n\u003cp\u003e\u003ca href=\"https:\/\/www.pts.se\/radio\/radioutrustning\/cybersakerhetskrav-for-radioutrustning\/\"\u003ePTS – cybersecurity requirements for radio equipment\u003c\/a\u003e · \u003ca href=\"https:\/\/eur-lex.europa.eu\/eli\/reg_del\/2022\/30\/oj\"\u003eEU 2022\/30\u003c\/a\u003e · \u003ca href=\"https:\/\/eur-lex.europa.eu\/eli\/reg_del\/2026\/339\/oj\"\u003eEU 2026\/339\u003c\/a\u003e · \u003ca href=\"https:\/\/eur-lex.europa.eu\/eli\/reg\/2024\/2847\/oj\"\u003eCRA (EU) 2024\/2847\u003c\/a\u003e · \u003ca href=\"https:\/\/eur-lex.europa.eu\/eli\/dir\/2014\/53\/oj\"\u003eRED 2014\/53\/EU\u003c\/a\u003e.\u003c\/p\u003e\n\n\u003cp\u003e\u003cstrong\u003eVersion 1.0, AI-assisted source control 10 November 2026.\u003c\/strong\u003e No external independent legal review, laboratory testing, notified body, regulatory decision, or actual CE certification has been performed. Check the latest version of the regulatory framework before operational application. The Digital ZIP file is not yet linked to Shopify Digital Products; the product is in DRAFT without publication.\u003c\/p\u003e\n\n\u003ch2\u003eRelated documents\u003c\/h2\u003e\n\n\u003cp\u003eFor another product category, there is a special \u003ca href=\"\/en\/products\/red-smartlas-cybersakerhet-importor-en18031-2027\"\u003eRED template for smart locks\u003c\/a\u003e. The broader \u003ca href=\"\/en\/products\/cyber-resilience-act-cra-compliance-2026-2027-svenska-english-riskbedomning-sbom-incidentrapportering-word-pdf-excel\"\u003eCRA Compliance Package\u003c\/a\u003e covers later horizontal product requirements. Choose this specialist package if the question concerns \u003cstrong\u003eradio toys' special privacy protection and supplier evidence for 2025–2027\u003c\/strong\u003e.\u003c\/p\u003e\n\n\u003c\/section\u003e","brand":"Svenska Dokumentmallar","offers":[{"title":"Default Title","offer_id":56573830332758,"sku":"RED-TOY-CYBER-2026-V1","price":79.0,"currency_code":"SEK","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/0827\/2373\/3846\/files\/01_RED_Leksaker_Huvudbild_1600.png?v=1794341347","url":"https:\/\/mallbutiken.se\/en\/products\/red-cybersakerhet-radioleksaker-en18031-importor-2027","provider":"Mallbutiken","version":"1.0","type":"link"}