Northern Ireland updates internet-connected radio rules
From 16 December 2025, new rules for internet-connected radio equipment take effect in Northern Ireland. The Radio Equipment (Amendment) (Northern Ireland) Regulations 2025, made on 25 November and signed by Kate Dearden, Minister for Employment Rights and Consumer Protection, update the 2017 regime so connected devices must protect networks, reduce fraud risk and safeguard user privacy, according to the official text on legislation.gov.uk.
Think of this as alignment under the Windsor Framework. Because the EU’s Radio Equipment Directive is listed in Annex 2, the UK has added a new rule-regulation 6A-so Northern Ireland mirrors the EU’s 2022 delegated cybersecurity requirements for radio equipment. That keeps trade flowing while raising the baseline for safety and privacy.
What counts as internet-connected radio equipment? In plain terms, any radio device that can reach the internet on its own or by piggy-backing on another gadget. That covers Wi‑Fi or mobile data products like smartphones, tablets, smart speakers and home routers, and also devices that connect through your phone, such as Bluetooth trackers.
Some groups of products get particular attention because they touch children and sensitive data. Toys, childcare devices and wearables-think baby monitors, kids’ smart watches and fitness bands-fall squarely in scope when they process personal, traffic or location data. The goal is to protect children’s movements, communications and profiles by design.
Three duties sit at the centre of the change. First, connected radio kit must not harm networks or misuse resources in ways that cause unacceptable service degradation. Second, if a device lets a user transfer money, monetary value or virtual currency, it must support features that protect users from fraud. Third, internet-connected devices-including those toys, childcare products and wearables-must build in safeguards for the privacy of users and subscribers.
When the law refers to data, it uses definitions drawn from the EU text. Personal data is information that identifies someone. Traffic data relates to how communications are sent. Location data indicates where a device or person is. If a product processes any of these, the privacy requirement in regulation 6A applies.
There are carve-outs to avoid double regulation. If radio equipment is already governed by other specialist legislation listed in Article 2 of the EU delegated regulation, the new duties do not apply to it. The idea is simple: where another rulebook already sets the cybersecurity or safety standard, this one steps back.
How is compliance shown? Through the familiar conformity assessment process. Manufacturers must design to the essential requirements, hold technical documentation, and follow the correct assessment route-sometimes with an approved body-before placing a product on the Northern Ireland market. Distributors and importers need to check that paperwork is in order.
What you can expect to see in shops is straightforward. CE‑marked devices for Northern Ireland should reflect the new essential requirements. Where a UK‑approved body is used, the UK(NI) marking may appear alongside CE. The important point for anyone selling into Northern Ireland is that products placed on the market from 16 December 2025 must meet regulation 6A.
If you teach computing or design and technology, this is a practical case study. Classroom prototypes aren’t being policed, but as soon as a kit is sold, the obligations switch on. It’s a good moment to explore with students how privacy by design, safe networking and anti‑fraud protections are not extras; they are entry tickets to the market.
For families and everyday users, nothing stops working overnight. Your old FM/AM radio is unaffected. New smart devices bought after 16 December should come with clearer privacy protections, safer defaults and stronger checks where payments are involved. You may also see firmware updates as brands align their Northern Ireland models with the rulebook.
Scope matters. These regulations extend to Northern Ireland only. Great Britain may operate different timings or requirements, so makers and sellers working across the UK and Ireland should confirm which regime applies to each destination before they ship.
If you want to see the primary texts, the statutory instrument and its explanatory note are available on legislation.gov.uk, and Commission Delegated Regulation (EU) 2022/30 contains the definitions used for internet-connected radio equipment, personal data, traffic data and location data.