Smart home and security
EU Declaration of Conformity for CCTV and IP Cameras: requirements and checklist
By Ing. Jaroslav Křepelka, Owner, DoC solutions s.r.o. · Updated 22 September 2026
Security cameras are among the connected products the EU cybersecurity rules were written for. A Wi-Fi camera is radio equipment and has had to meet the RED cybersecurity and data-protection requirements since 1 August 2025; a wired PoE camera is not radio equipment, but it will fall under the Cyber Resilience Act from 11 December 2027 like every other connected product.
This page covers consumer and small-business IP cameras, both Wi-Fi and wired PoE, including battery-powered outdoor cameras and doorbell cameras.
Checklist: what your cctv / ip camera declaration must contain
- Model exactly as on the camera, with each variant (indoor, outdoor, Wi-Fi, PoE) covered
- Name and postal address of the manufacturer (and of the authorised representative, if appointed)
- The statement that the declaration is issued under the sole responsibility of the manufacturer
- Wi-Fi models: Radio Equipment Directive 2014/53/EU including Delegated Regulation (EU) 2022/30; wired models: EMC Directive 2014/30/EU
- RoHS Directive 2011/65/EU
- The harmonised standards applied, with versions
- Place and date of issue, name and function of the signatory, and the signature
Which EU legislation applies
| Legislation | Applies? | In the DoC? | Notes |
|---|---|---|---|
| Radio Equipment Directive2014/53/EU | Depends on model | In the DoC: Yes | For Wi-Fi, LTE or Bluetooth cameras; covers safety, EMC and radio. |
| Cybersecurity delegated actDelegated Regulation (EU) 2022/30 | Depends on model | In the DoC: Yes | For radio cameras, applicable since 1 August 2025: network protection for internet-connected equipment and, because images and audio are personal data, the data-protection requirement. |
| EMC Directive2014/30/EU | Depends on model | In the DoC: Yes | For wired (PoE or Ethernet) cameras without a radio. A PoE camera runs at around 48 V DC, below the LVD range; its safety is assessed under the GPSR, and the PoE switch or injector is a separate LVD product. |
| Cyber Resilience Act(EU) 2024/2847 | Applies | In the DoC: No | Applies to wired and wireless cameras alike: vulnerability reporting from 11 September 2026, full requirements including CE marking under the CRA for products placed on the market from 11 December 2027. |
| Standby and off-mode ecodesignDirective 2009/125/EC + Regulation (EU) 2023/826 | Depends on model | In the DoC: Yes | Video cameras are listed in Annex II; mains-dependent cameras for home use fall within the networked standby requirements. Battery-powered cameras that do not depend on mains power are usually outside. |
| RoHS Directive2011/65/EU | Applies | In the DoC: Yes | Restriction of hazardous substances in electrical and electronic equipment. |
Typical harmonised standards
A harmonised standard gives presumption of conformity only in the version cited in the Official Journal of the EU. Always check the current list for each directive before you issue or update a declaration (European Commission: harmonised standards); the versions below are the ones commonly used at the time of writing, and the right selection depends on your product.
Radio and EMC
Radio versions shown are cited under RED in Implementing Decision (EU) 2022/2191 as amended.
- ETSI EN 300 328 V2.2.2 and EN 301 893 V2.2.12.4 GHz and 5 GHz Wi-Fi
- ETSI EN 301 489-1 and EN 301 489-17 V3.3.1EMC for radio equipment
- EN 55032:2015 + A11:2020 and EN 55035:2017 + A11:2020EMC of multimedia equipment — the core standards for wired cameras
Safety and EMF
- EN 62368-1Audio/video and ICT equipment safety (LVD list: 2014 edition; current edition EN IEC 62368-1:2024 + A11:2024)
- EN 62311 or EN 62479Human exposure to electromagnetic fields
Cybersecurity
- EN 18031-1:2024Internet-connected radio equipment (cited with restrictions)
- EN 18031-2:2024Radio equipment processing personal data (cited with restrictions)
Already have a declaration for your cctv / ip camera?
A certification expert checks it against everything on this page and tells you exactly what to fix. Written report in 48 hours, €99 per product (excl. VAT).
Common mistakes in cctv / ip camera declarations
Cybersecurity missing for a Wi-Fi camera
Since 1 August 2025 a Wi-Fi camera without a security assessment against RED Article 3(3)(d) and (e) cannot be placed on the market. Default credentials, unencrypted streams and no update path are classic failures.
A PoE camera declared under the LVD
Power over Ethernet runs below the LVD voltage range. The camera's declaration rests on the EMC Directive and RoHS; safety is shown through EN 62368-1 under the GPSR.
Radio and wired variants share one declaration without distinction
Wi-Fi and PoE versions follow different directives and must be identified separately.
Outdoor claims without evidence
IP ratings and operating temperature ranges on the packaging need test reports; they also affect the safety assessment.
No plan for the Cyber Resilience Act
Wired cameras are not covered by the RED delegated act, but they will be by the CRA from 11 December 2027, with reporting obligations from 11 September 2026.
What you need besides the declaration
- Technical documentation
- Radio or EMC reports, safety and EMF reports, a security risk assessment covering device, app and cloud, standby measurements where relevant, and RoHS documentation. Keep it for 10 years.
- Security updates and vulnerability handling
- A contact point for vulnerability reports and a way to deliver updates; mandatory under the CRA.
- Instructions
- Installation, secure set-up (changing passwords, updates) and privacy information in the local language. Users recording public spaces have GDPR obligations; your instructions can point this out.
- Economic operator in the EU
- An importer, authorised representative or responsible person established in the EU (Article 4 of Regulation (EU) 2019/1020).
No EU presence yet? We can act as your EU authorised representative or responsible person.
Frequently asked questions
Do Wi-Fi security cameras have to meet the RED cybersecurity rules?
+
Yes. Since 1 August 2025 internet-connected radio equipment must meet the network-protection requirement, and cameras that process images or audio also the data-protection requirement.
Does the RED cybersecurity requirement apply to PoE cameras?
+
No, because they are not radio equipment. They will be covered by the Cyber Resilience Act from 11 December 2027.
Does a PoE camera need the Low Voltage Directive?
+
Normally not: PoE runs at around 48 V DC, below the LVD's 75 V DC threshold. The mains-powered PoE switch or injector is a separate LVD product.
What does MyCECheck check on an IP camera declaration?
+
Whether RED or EMC is correctly chosen for each variant, the cybersecurity coverage, standards and versions, and identification of models and the economic operator. Written report within 48 hours.
Already have a declaration for your cctv / ip camera?
A certification expert checks it against everything on this page and tells you exactly what to fix. Written report in 48 hours, €99 per product (excl. VAT).