Episode Description

Want to sell an IoT device in Europe? Bring a checklist. This episode opens with the EU's EN 18031 cybersecurity standard, in force since August 1, 2025, and walks through what it demands at every step of a product's life — design, production, data handling, even payment-terminal transaction signing. It then zooms out to four flagship EU laws IoT makers should know: the CRA (supply chain security, up to 4% revenue fines), the Data Act (data sharing and cloud portability), the AI Act (risk-based rules, up to 6% revenue fines), and the CSRD (mandatory ESG reporting). After a quick look at the EU 5G compliance guidelines, David unpacks the three core CE directives — LVD for electrical safety, EMC for electromagnetic compatibility, and RED for wireless — using real cases like smart cameras, smart plugs, office humidity sensors, smart locks, 4G water meters, and LoRa smoke alarms to make the requirements concrete. The episode closes with certification costs (roughly €350 to €18,000), how SIMCom's pre-certified modules save clients time and money, and the difference between mandatory certifications (the floor) and voluntary ones like GS, EPEAT, and GDPR-compliance marks (the value-add).

Chapters & Timestamps

0:00 — Hook: EU's EN 18031 cybersecurity rules go live on August 1, 2025

1:30 — Cold open: what IoT makers actually need to break into Europe

3:00 — What the rules demand: design, production, payment security, lifecycle

6:30 — The impact on makers: cost, design shifts, supply chain, fines up to 4% revenue

9:00 — How SIMCom prepared early, since 2022

10:30 — The four flagship EU laws: CRA, Data Act, AI Act, CSRD

13:30 — CRA & Data Act: supply-chain security and user data access

15:00 — AI Act (up to 6% revenue fines) & CSRD ESG reporting

16:30 — EU 5G compliance guidelines

18:00 — CE 101 plus the LVD directive: electrical safety in real devices

20:30 — EMC: electromagnetic compatibility in offices, homes and factories

23:00 — RED: spectrum and wireless security (4G meters, LoRa smoke alarms)

25:00 — Costs (€350–€18,000) and the value of pre-certified modules

26:30 — RoHS plus operator certifications (CTA, Vodafone, TIM)

27:30 — Voluntary certs (GS, EPEAT, GDPR): the value-add layer

28:30 — Wrap-up: mandatory as floor, voluntary as competitive edge