Two regimes are already in force: the UK’s PSTI product-security regime has applied to consumer connectable products since April 2024, and the Radio Equipment Directive’s cybersecurity requirements (EN 18031) have applied to internet-connected radio equipment since 1 August 2025. If your product connects and sells in the UK or EU, the odds are something already applies. The readiness check covers all three regimes.

If your product has digital elements and connects to a device or network, and you place it on the EU market, it almost certainly does. The reporting obligations cover products already on sale; anything you place on the market from December 2027 must meet the essential requirements. Some classes are treated as “important” or “critical” and may need a notified body. The readiness check is a fast way to see where you stand.