What Is CE Certification – Complete EU Market Access Guide

2026-08-03

For exports to the EU, the CE mark is unavoidable.

Many domestic manufacturers think "get a lab report, stick a label, and ship." But the legal framework is far more complex. It's not about a piece of paper – it's about the product's full‑lifecycle compliance responsibility in the European market.

The CE mark is essentially the manufacturer's own declaration – "I've tested this product against all applicable EU regulations, and I take responsibility." It's not a certificate issued by any authority – and it's fundamentally different from government‑backed certifications like CCC or FCC.

1. Which Products Does CE Cover – and Which Directives Apply?

CE covers a wide range of products. Picking the wrong directive or missing applicable standards is the most common failure.

1.1 Electrical and electronic products
Core regulations are the RED (Radio Equipment Directive), EMC Directive, and LVD (Low Voltage Directive) – the three‑piece set. Wireless devices go through RED – covering RF, EMC, safety, and health assessment. Wired‑only, non‑connected electrical equipment goes through EMC + LVD.

1.2 RED cybersecurity – online claims are often wrong
From August 2025, (EU) 2025/138 has made EN 18031 a harmonised standard under RED. Products that meet the corresponding EN 18031 security clauses (e.g., factory‑default passwords that force first‑boot change) can still use Module A self‑declaration. Only products that cannot meet the standard's protection requirements – and have no exemption – must go through NB type‑examination.

Clarification: the widely circulated claim that "all connected devices are subject to mandatory NB review" is incorrect.

1.3 Other categories

·Machinery: Machinery Directive 2006/42/EC

·Medical devices: MDR 2017/745

·Toys: Toy Safety Directive 2009/48/EC

·Construction products: CPR 305/2011

Each category has its own list of harmonised standards – check model by model.

1.4 Multiple directives may apply
A single product may be subject to multiple directives. A Wi‑Fi‑enabled medical monitoring device – RED, MDR, and RoHS – all three must be met – and the DoC must list every single one.

  2. CE Certification Paths – From Module A to H – Choosing Wrong Wastes Money

CE has eight conformity assessment modules, A through H – vastly different difficulty and cost.

2.1 Module A – Internal Production Control
The manufacturer performs all tests and assessments independently, signs the DoC, and no third party is involved. Suitable for low‑risk products – ordinary non‑connected wired electrical equipment follows this path.

Note: don't compare with MDR's Class I classification – that's a different regulatory logic. Under MDR, even Class I – if it's sterile (Is) or has measuring function (Im) – still requires NB involvement.

2.2 Module B – EU Type Examination
Samples are sent to an NB for testing – the NB issues a type‑examination certificate. Module B alone does not complete CE – it must be combined with C, D, E, F, or G (covering production). B+C: type‑examination + internal production control – NB checks the sample, manufacturer controls mass production. B+D: type‑examination + production quality assurance – NB checks both sample and factory.

2.3 Module H – Full Quality Assurance
The NB is involved from the design stage – design, production, and final inspection – full‑chain assessment. Mainly for high‑risk explosion‑proof equipment and medical devices – rarely used for ordinary RED wireless products. Some articles incorrectly link Module H with RED wireless products – that doesn't match industry practice.

  3. Getting CE Done – Five Steps, Each with Traps

3.1 Identify applicable directives and standards
Based on product function and application scenarios, identify all covering EU directives and corresponding harmonised standards. If you miss one, all subsequent testing is useless.

3.2 Perform conformity assessment

·Module A: do it yourself.

·If NB is required: send samples to the NB.

For wireless products, RF and EMC test standards must be listed in the EU Official Journal (OJ). If they're not in the OJ, the report cannot support a CE declaration.

Alternative path: in rare cases, technical documentation论证 may be used – but it's extremely difficult – not recommended.

3.3 Compile the Technical File
This is the foundation of CE – product description, design drawings, circuit diagrams, BOM, risk assessment report, test reports, user manual – one document missing and the file is incomplete. Most electrical/electronic directives require retention for 10 years from the last batch placed on the market – not from the date of last sale. Medical devices and explosion‑proof equipment have different rules.

3.4 Draft and sign the DoC
The DoC can be in English, German, French, or any other EU official language – English is not mandatory. List product information, applicable directives and standard numbers, test report numbers, manufacturer name/address, and EU‑REP information – signed and stamped by the manufacturer. Some member‑state authorities may request a local‑language translation – that does not mean the original DoC must be in English.

3.5 Affix the CE mark
Follow the official proportions – on the product body, packaging, and manual. If you went through Module B (NB type‑examination), the NB's identification number must appear next to the CE mark on the product body. For some module‑combination paths, the NB number only needs to appear in the documentation – not on the label.

From my experience:

·No NB: testing to file completion – roughly 2–4 weeks.

·With NB: scheduling + review – typically 8–12 weeks minimum.

These are industry reference ranges – NB schedules and remediation rounds both affect the actual timeline – don't quote these as fixed numbers to clients.

  4. Three New 2026 Rules – Each Affects Exports

4.1 RED (EU) 2025/138 – expanded NB determination
Connected devices with default universal passwords, processing child personal data, or online payment functions – must first assess whether they meet EN 18031 security clauses – to determine whether NB is required. EN 18031 became mandatory on 1 August 2025 – 2026 is about market‑surveillance enforcement tightening.

4.2 CRA – Cyber Resilience Act
Mandatory from 11 December 2027. Although CRA is not a CE directive itself, it is tightly linked to CE. Connected products must provide security updates and vulnerability management throughout their lifecycle – and maintain them for 10 years after the last sale. Mutual recognition between CRA and EN 18031 is not legally guaranteed. Some categories are exempt – in‑vehicle and medical devices are covered by separate cybersecurity regulations.

4.3 UKCA transition
Extended to 31 December 2027.

Critical deadline – get this wrong and you're stuck:

Only CE documentation that completed conformity assessment before 31 December 2024 can use this transition period to enter the UK market – validity is the earlier of the certificate expiry date or 31 December 2027. CE assessments completed after 2025 cannot use this transition period. Many manufacturers believe that a new CE mark now automatically grants UK market access until the end of 2027 – this is a major compliance misunderstanding.

  5. Common Pitfalls – Lessons from Chinese Manufacturers

5.1 Treating Switzerland as the EU
Switzerland does not accept CE. Most electrical/electronic products require Swiss SNCH certification – sticking a CE mark and shipping to Switzerland will be rejected – this is the most common trap. Liechtenstein (also an EFTA member) does accept CE.

5.2 Forgetting the EU‑REP
Overseas manufacturers must appoint an EU‑based authorised representative – customs checks this first. No EU‑REP = no release.

5.3 RoHS 2.0 – don't bury it
RoHS is an independent environmental directive – the DoC should separately list its harmonised standard number – industry practice. Don't bury it under RED or LVD. Missing this makes the DoC legally incomplete.

5.4 Don't be scared by penalties – but don't ignore them either
Each member state sets its own penalties – Germany and France have different caps. The "4% of global annual revenue" figure comes from GDPR and CRA – not from general CE directives. But with mandatory recalls across all categories, the cost of non‑compliance is always higher than compliance.


For CE certification and EU market access, contact BlueAsia at 13534225140 (King) or email king.guo@cblueasia.com.