{"product_id":"red-smartlas-cybersakerhet-importor-en18031-2027","title":"RED-cybersecurity smart lock 2026\/2027 – importer control, EN 18031 \u0026 batch block | Word\/PDF\/Excel","description":"\u003cp\u003e\u003cstrong\u003eDo you import Wi-Fi or Bluetooth-controlled smart locks into Sweden or the EU?\u003c\/strong\u003e With this niche Word\/PDF\/Excel package, you can document \u003cstrong\u003ewhich RED cybersecurity requirements actually apply\u003c\/strong\u003e, request relevant evidence from the manufacturer, and track every model, firmware version, and batch to make a well-founded decision. Designed for Swedish importers and product liability holders – not a general IT security policy.\u003c\/p\u003e\n\u003cp\u003eFrom \u003cstrong\u003e1 August 2025\u003c\/strong\u003e, certain radio equipment will be subject to additional cybersecurity requirements under the RED and delegated regulation (EU) 2022\/30. The requirements may apply to equipment with a direct \u003cem\u003eor indirect\u003c\/em\u003e internet connection via an app or gateway. An important change is that this regulation will be repealed on \u003cstrong\u003e11 December 2027\u003c\/strong\u003e by (EU) 2026\/339, when relevant CRA requirements take over. Historical checks of earlier products may continue.\u003c\/p\u003e\n\u003cdiv style=\"border:2px solid #2D638D;background:#EEF5FA;padding:16px 2020px;margin:20px 0\"\u003e\n\n\u003ch2 style=\"margin-top:0\"\u003ePackage Contents\u003c\/h2\u003e\n\n\u003cp\u003e\u003cstrong\u003e7 editable Word documents\u003c\/strong\u003e (five Swedish working templates, Swedish user guide, English User Guide), \u003cstrong\u003e7 corresponding searchable PDF files\u003c\/strong\u003e, and \u003cstrong\u003e1 Excel workbook with nine tabs\u003c\/strong\u003e. A total of 15 files in a compressed ZIP for future digital download. The PDF versions are not interactively fillable.\u003c\/p\u003e\n\n\n\u003c\/div\u003e\n\u003cdiv style=\"border:2px solid #2D638D;background:#EEF5FA;padding:16px 20px;margin:20px 0\"\u003e\n\n\u003ch2 style=\"margin-top:0\"\u003eWhat the Files Contain\u003c\/h2\u003e\n\n\u003cp\u003ePractical checklists and fields for product model, firmware, connection chain, actor role, requirement assessment under RED 3.3(d\/e\/f), harmonised standards, supplier declaration, test evidence, non-conformities, batch decisions, and the transition to CRA. The Excel workbook includes status options and tested summary formulas, but does not make any legal or technical decisions for you.\u003c\/p\u003e\n\n\n\u003c\/div\u003e\n\u003ch2\u003eAll Documents in the Package\u003c\/h2\u003e\u003ctable style=\"border-collapse:collapse;width:100%\"\u003e\n\n\u003cthead\u003e\u003ctr\u003e\n\n\u003cth style=\"border:1px solid #AAC9DC;padding:8px;text-align:left\"\u003eFile\u003c\/th\u003e\n\n\u003cth style=\"border:1px solid #AAC9DC;padding:8px;text-align:left\"\u003eWhat It Helps You Do\u003c\/th\u003e\n\n\n\u003c\/tr\u003e\u003c\/thead\u003e\n\n\u003ctbody\u003e\n\n\u003ctr\u003e\n\n\u003ctd style=\"border:1px solid #AAC9DC;padding:8px\"\u003e01 – Role and Applicability Assessment\u003c\/td\u003e\n\n\u003ctd style=\"border:1px solid #AAC9DC;padding:8px\"\u003eClassify Bluetooth\/Wi-Fi, gateway, manufacturer\/importer, date, and RED 3.3(d\/e\/f).\u003c\/td\u003e\n\n\n\u003c\/tr\u003e\n\n\u003ctr\u003e\n\n\u003ctd style=\"border:1px solid #AAC9DC;padding:8px\"\u003e02 – Supplier Letter and Documentation Requirements\u003c\/td\u003e\n\n\u003ctd style=\"border:1px solid #AAC9DC;padding:8px\"\u003eRequest the relevant EU declaration, CE traceability, standard versions, and test evidence.\u003c\/td\u003e\n\n\n\u003c\/tr\u003e\n\n\u003ctr\u003e\n\n\u003ctd style=\"border:1px solid #AAC9DC;padding:8px\"\u003e03 – Security Testing and Chain of Evidence\u003c\/td\u003e\n\n\u003ctd style=\"border:1px solid #AAC9DC;padding:8px\"\u003eDocument actual tests, firmware, EN 18031 assessment pathway, and limited presumption.\u003c\/td\u003e\n\n\n\u003c\/tr\u003e\n\n\u003ctr\u003e\n\n\u003ctd style=\"border:1px solid #AAC9DC;padding:8px\"\u003e04 – Batch Hold and Non-Conformity\u003c\/td\u003e\n\n\u003ctd style=\"border:1px solid #AAC9DC;padding:8px\"\u003eDocument deficiencies, supplier response, corrections, risk, and release decisions.\u003c\/td\u003e\n\n\n\u003c\/tr\u003e\n\n\u003ctr\u003e\n\n\u003ctd style=\"border:1px solid #AAC9DC;padding:8px\"\u003e05 – RED to CRA 2027\u003c\/td\u003e\n\n\u003ctd style=\"border:1px solid #AAC9DC;padding:8px\"\u003ePlan the transition on 11 December 2027 without losing historical RED evidence.\u003c\/td\u003e\n\n\n\u003c\/tr\u003e\n\n\u003ctr\u003e\n\n\u003ctd style=\"border:1px solid #AAC9DC;padding:8px\"\u003e06 – Swedish User Guide\u003c\/td\u003e\n\n\u003ctd style=\"border:1px solid #AAC9DC;padding:8px\"\u003eStep-by-step workflow with concrete scenarios and legal boundaries.\u003c\/td\u003e\n\n\n\u003c\/tr\u003e\n\n\u003ctr\u003e\n\n\u003ctd style=\"border:1px solid #AAC9DC;padding:88px\"\u003e07 – English User Guide\u003c\/td\u003e\n\n\u003ctd style=\"border:1px solid #AAC9DC;padding:8px\"\u003eEnglish instructions for the Swedish working templates and Excel workbook.\u003c\/td\u003e\n\n\n\u003c\/tr\u003e\n\n\u003ctr\u003e\n\n\u003ctd style=\"border:1px solid #AAC9DC;padding:8px\"\u003e08 – Excel Register, Nine Tabs\u003c\/td\u003e\n\n\u003ctd style=\"border:1px solid #AAC9DC;padding:8px\"\u003eOverview, model register, role\/scope, evidence, tests, non-conformities, batch decisions, transition, and Read Me.\u003c\/td\u003e\n\n\n\u003c\/tr\u003e\n\n\n\u003c\/tbody\u003e\n\n\n\u003c\/table\u003e\n\u003ch2\u003eWho Is the Template For?\u003c\/h2\u003e\u003cp\u003eImporters, small and medium-sized technology companies, brand owners, and quality assurance holders who review imported internet-connected smart locks, including locks where a \u003cstrong\u003eBluetooth-connected mobile app or gateway provides an indirect internet connection\u003c\/strong\u003e. Determine separately whether the company is an importer, distributor, or takes on manufacturer responsibility under RED through branding or product modification.\u003c\/p\u003e\n\u003ch2\u003eRED Article 3.3(d), (e), and (f) – Correct Applicability\u003c\/h2\u003e\u003cp\u003e\u003cstrong\u003e3.3(d)\u003c\/strong\u003e concerns network protection and applies to internet-connected radio equipment within the relevant scope. \u003cstrong\u003e3.3(e)\u003c\/strong\u003e concerns the protection of personal data and privacy when the equipment in question can process such data or traffic\/location data. \u003cstrong\u003e3.3(f)\u003c\/strong\u003e concerns fraud protection for equipment that enables the transfer of money, monetary value, or virtual currency – it does \u003cstrong\u003enot automatically\u003c\/strong\u003e follow from the product being a smart lock.\u003c\/p\u003e\n\u003ch2\u003eEN 18031 and CE Documentation\u003c\/h2\u003e\u003cp\u003eThe harmonised standards \u003cstrong\u003eEN 18031-1:2024\u003c\/strong\u003e (network), \u003cstrong\u003eEN 18031-2:2024\u003c\/strong\u003e (personal data\/privacy), and \u003cstrong\u003eEN 18031-3:2024\u003c\/strong\u003e (fraud protection) may be relevant depending on the actual assessment. According to the Commission Implementing Decision \u003cstrong\u003e(EU) 2025\/138\u003c\/strong\u003e, the standards have explicit restrictions. They therefore do not automatically provide full presumption of conformity; check the need for another assessment pathway, including a notified body where required.\u003c\/p\u003e\n\u003ch2\u003eRED to CRA – Check the Cut-off Date\u003c\/h2\u003e\u003cp\u003e\u003cstrong\u003e1 August 2025–10 December 2027:\u003c\/strong\u003e The RED cybersecurity requirements made applicable by (EU) 2022\/30 must be assessed for the products concerned. \u003cstrong\u003eFrom 11 December 2027:\u003c\/strong\u003e the complementary regulation will be repealed by (EU) 2026\/339, and the applicable requirements in the Cyber Resilience Act (EU) 2024\/2847 must be assessed. Other RED requirements may still apply. Earlier batches may be subject to historical market surveillance.\u003c\/p\u003e\n\u003ch2\u003eHow the Documents Are Used\u003c\/h2\u003e\u003col\u003e\n\n\u003cli\u003eRecord the model, SKU, manufacturer, firmware, and market access date.\u003c\/li\u003e\n\n\u003cli\u003eAssess the internet connection chain, personal data, and payment functions separately in document 01.\u003c\/li\u003e\n\n\u003cli\u003eRequest the EU declaration, CE details, and relevant EN 18031\/test documentation in document 02.\u003c\/li\u003e\n\n\u003cli\u003eLink actual checks to the test ID, document version, and non-conformity ID in document 03 and the Excel workbook.\u003c\/li\u003e\n\n\u003cli\u003eHold affected batches if deficiencies are found and document the correction, retesting, and signed decision.\u003c\/li\u003e\n\n\u003cli\u003eReview future purchases and compliance plans according to the 2027 transition.\u003c\/li\u003e\n\n\n\u003c\/ol\u003e\n\u003ch2\u003eImportant Limitations\u003c\/h2\u003e\u003cul\u003e\n\n\u003cli\u003eThis is \u003cstrong\u003edocumentation support\u003c\/strong\u003e, not actual laboratory testing, a completed EU declaration, a notified body, or CE certification.\u003c\/li\u003e\n\n\u003cli\u003eConfidential technical documentation, standard text, and licences are not included.\u003c\/li\u003e\n\n\u003cli\u003eNo test results, regulatory decisions, supplier declarations, or signatures have been fabricated.\u003c\/li\u003e\n\n\u003cli\u003eGDPR, other RED requirements, and product safety may need to be checked separately.\u003c\/li\u003e\n\n\u003cli\u003eA completed checklist does not automatically mean a particular product may be sold.\u003c\/li\u003e\n\n\n\u003c\/ul\u003e\n\u003ch2\u003eFrequently Asked Questions\u003c\/h2\u003e\u003ch3\u003eDo RED cybersecurity requirements apply to a Bluetooth smart lock?\u003c\/h3\u003e\u003cp\u003eBluetooth alone does not determine this. Assess whether the lock can connect to the internet directly or indirectly via a phone or gateway and whether specific requirements apply.\u003c\/p\u003e\u003ch3\u003eMust the importer have the manufacturer's complete technical documentation?\u003c\/h3\u003e\u003cp\u003eThe importer's obligations differ from the manufacturer's. The package supports the checking and tracking of necessary information without incorrectly claiming that every importer must always hold the manufacturer's entire technical file.\u003c\/p\u003e\u003ch3\u003eIs a CE mark or EN 18031 statement sufficient?\u003c\/h3\u003e\u003cp\u003eNo. Actually assess the relevant EU declaration, model documentation, scope of the standard, and published restrictions. EN 18031 does not always provide full presumption of conformity.\u003c\/p\u003e\u003ch3\u003eDoes Article 3.3(f) automatically apply to all digital door locks?\u003c\/h3\u003e\u003cp\u003eNo. The fraud protection provision must be assessed based on whether the equipment actually enables the transfer of money, monetary value, or virtual currency.\u003c\/p\u003e\u003ch3\u003eWhat happens on 11 December 2027?\u003c\/h3\u003e\u003cp\u003eDelegated Regulation (EU) 2022\/30 will be repealed on that day according to (EU) 2026\/339 when the CRA's main requirements come into effect. This does not retroactively change the checking of radio equipment from the earlier period.\u003c\/p\u003e\u003ch3\u003eCan the documents be used as CE certificates?\u003c\/h3\u003e\u003cp\u003eNo. They do not create CE marking, EU declarations, technical laboratory tests, or notified body assessments.\u003c\/p\u003e\u003ch3\u003eIs the product legally reviewed and in English?\u003c\/h3\u003e\u003cp\u003eAI-assisted legal source check as of 10 November 2026; no external legal review. Five operational templates and the Swedish guide are in Swedish; an English guide is included, but the working templates are not translated.\u003c\/p\u003e\n\u003ch2\u003eOfficial Legal Sources\u003c\/h2\u003e\u003cp\u003e\u003ca href=\"https:\/\/www.pts.se\/radio\/radioutrustning\/cybersakerhetskrav-for-radioutrustning\/\"\u003ePTS – cybersecurity requirements for radio equipment\u003c\/a\u003e · \u003ca href=\"https:\/\/eur-lex.europa.eu\/eli\/dir\/2014\/53\/oj\"\u003eRED 2014\/53\/EU\u003c\/a\u003e · \u003ca href=\"https:\/\/eur-lex.europa.eu\/eli\/reg_del\/2022\/30\/oj\"\u003e(EU) 2022\/30\u003c\/a\u003e · \u003ca href=\"https:\/\/eur-lex.europa.eu\/eli\/dec_impl\/2025\/138\/oj\"\u003e(EU) 2025\/138, EN 18031 restrictions\u003c\/a\u003e · \u003ca href=\"https:\/\/eur-lex.europa.eu\/eli\/reg_del\/2026\/339\/oj\"\u003e(EU) 2026\/339\u003c\/a\u003e · \u003ca href=\"https:\/\/eur-lex.europa.eu\/eli\/reg\/2024\/2847\/oj\"\u003eCRA 2024\/2847\u003c\/a\u003e.\u003c\/p\u003e\n\u003ch2\u003eRelated Templates\u003c\/h2\u003e\u003cp\u003eFor broader Cyber Resilience Act preparation, \u003ca href=\"https:\/\/mallbutiken.se\/products\/cyber-resilience-act-cra-compliance-2026-2027-svenska-english-riskbedomning-sbom-incidentrapportering-word-pdf-excel\"\u003eCRA Compliance 2026\/2027\u003c\/a\u003e is available. For tracking technical vulnerabilities, \u003ca href=\"https:\/\/mallbutiken.se\/products\/patchhantering-sarbarhetsregister-riskprioritering-excel\"\u003ePatch Management and Vulnerability Register\u003c\/a\u003e is available. This product is instead tailored for \u003cstrong\u003ethe RED importer's checking of smart locks and the 2027 legal transition\u003c\/strong\u003e.\u003c\/p\u003e\n\u003cp\u003e\u003csmall\u003eVersion 1.0 | AI-assisted legal source check 2026-11-10 | No external legal review | Jurisdiction Sweden\/EU | Word\/PDF\/Excel | Digital download (ZIP) only after future activation.\u003c\/small\u003e\u003c\/p\u003e","brand":"Svenska Dokumentmallar","offers":[{"title":"Default Title","offer_id":56568479023446,"sku":"RED-SMARTLAS-2027-V1","price":79.0,"currency_code":"SEK","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/0827\/2373\/3846\/files\/mb-red-smartlas-huvud-1600.png?v=1794305884","url":"https:\/\/mallbutiken.se\/en\/products\/red-smartlas-cybersakerhet-importor-en18031-2027","provider":"Mallbutiken","version":"1.0","type":"link"}