Tag: Taiwan

  • Taiwan Expands BSMI Cybersecurity Requirements to Cameras, Routers, Displays and Smart TVs

    Six Product Groups Now Need a Security Test

    Under BSMI Announcement No. 11530018140, effective 2 October 2026, Taiwan now requires cybersecurity testing for network-connected cameras, routers, video recorders, displays and TVs, as well as all concealed cameras. A product counts as network-connected if it uses TCP/IP. The announcement also brings three product types into the regulated scope. Concealed cameras without storage must comply immediately, while cameras without storage and tiled video-wall displays follow on 1 July 2028. Manufacturers already holding certificates for affected products have until 30 June 2028 to reissue them against the new standards, or BSMI will revoke them.

    Which Products Fall Under the New BSMI Cybersecurity Requirements

    The announcement adds a cybersecurity test on top of the existing safety, EMC and RoHS marking checks. Products that are medical devices or telecommunications terminal equipment stay outside the scope, because other laws govern them. For everything else on the list below, the BSMI cybersecurity requirements apply from the announcement date.

    Network Cameras and Concealed Cameras Lead the List

    Digital video cameras with network connection now need a cybersecurity test, whether or not they store footage. Concealed cameras are covered too, with or without a network connection. BSMI defines a concealed camera as a miniature camera built into an everyday item such as a pen, button, pair of glasses, watch or USB drive, with a lens smaller than 2 cm by 2 cm.

    Routers, Gateways and Smart Speakers Join In

    Routers, bridges, switches, network hubs and gateways are now in scope. BSMI explicitly includes smart speakers and smart home assistants in this group. USB hubs and KVM switches remain under simple Declaration of Conformity and need no security test.

    Video Recorders, Displays and Smart TVs Complete the Picture

    On the audio-visual side, network-connected video recorders, displays and TVs must now pass a security standard. Displays and TVs without a network connection keep their current requirements.

    Five Standard Routes to Demonstrate Compliance

    BSMI does not force one standard on everyone. Manufacturers pick one option from a menu, and the menu depends on the product and on how it connects.

    OptionStandard (edition year)Cameras and recordersRouters, displays, TVs
    IoT baselineCNS 16190 (2023)YesYes
    Radio equipment securityCNS 18031-1 and -2 (2025)Wireless onlyWireless only
    Industrial component securityCNS 62443-4-2 (2022)YesYes
    Common CriteriaCNS 15408 parts 1 to 3 (2004) or parts 1 to 5 (2021)YesYes
    Video surveillance seriesCNS 16120 and CNS 16132 seriesYesNot offered

    Wireless Products Choose From the Full Menu

    A product with wireless connection, or with both wireless and wired, may use any option listed for its product group.

    Wired-Only Products Cannot Use CNS 18031

    The CNS 18031 route is reserved for products with a wireless interface. A camera that only connects by Ethernet, for example, must choose CNS 16190, CNS 62443-4-2, CNS 15408 or the CNS 16120 series. Cameras use CNS 16120-2 and CNS 16132-2, while video recorders use the -3 parts of the same series.

    New Products Added to the Regulated Scope

    Three product types are newly regulated, and BSMI already accepts applications for all of them.

    ProductRegulated from
    Concealed cameras without storage2 October 2026
    Digital cameras and video cameras without storage1 July 2028
    Tiled video-wall displays1 July 2028

    Certificates issued before 1 July 2028 start their three-year validity on that date. Concealed cameras must also carry this Chinese warning on the packaging and in the manual: 「嚴禁用於他人非公開活動與身體隱私部位，違者自負刑事與民事責任」. It states that using the device on other people’s private activities or private body parts is prohibited and carries criminal and civil liability.

    Stricter Certification Cybersecurity Schemes

    Product groupNew schemeApplies from
    Network-connected cameras, recorders, displays and TVsTABI, or RPC with a type test plus a quality system or factory inspection module2 October 2026
    Routers, switches, gateways and smart speakersTABI, or RPC with a type test plus a quality system or factory inspection module (replaces Declaration of Conformity)1 July 2028

    Non-connected versions keep the lighter Declaration of Conformity to Type module. Router DoCs signed under the old rules become invalid on 1 July 2028. Unsold stock imported before then needs an RPC certificate or a batch inspection pass before it can be sold.

    Existing Certificates and Test Reports

    Reissue Certificates by 30 June 2028

    Holders of certificates for connected cameras, concealed cameras, recorders, displays and TVs must apply for reissue with proof of compliance to a listed standard. The reissued certificate keeps its original expiry date and will show the standard and security level met. Certificates not reissued in time will be revoked.

    Reuse Old Reports Through Difference Testing

    If an existing IoT or surveillance security report came from a BSMI-recognised lab, that lab can run difference testing against the listed standard and Taiwan’s regional deviations. The updated report is accepted for Type Approval or RPC.

    Transition Timeline for BSMI Cybersecurity Requirements

    DateWhat happens
    2 October 2026New standards apply. Concealed cameras without storage are regulated. BSMI accepts applications for all new products.
    30 June 2028Deadline to reissue existing certificates. Certificates issued under the old rules expire.
    1 July 2028Old standards and schemes end. Cameras without storage and tiled displays are regulated. Router DoCs become invalid. Import control C02 starts for several HS codes.

    Key Takeaways

    • Concealed camera importers have no grace period. Units without storage were regulated on the day the announcement was published. Shipments already in transit may be held at customs without a certificate.
    • Router and smart speaker brands face the steepest climb. Moving from a Declaration of Conformity to full certification with a factory or quality system module adds cost, paperwork and time. Start planning type tests and factory readiness in 2027 at the latest.

    Source: https://www.bsmi.gov.tw/wSite/public/Data/f1790932691717.pdf

  • CNS 61558-1: Taiwan’s BSMI Rolls Out New Standard for Battery Chargers and UPS Devices

    Overview: Battery Charger and UPS Inspection

    On September 8, 2026, Taiwan’s BSMI adopted CNS 61558-1, a new standard harmonized with international IEC 61558-1, replacing the prior domestic basis for testing battery chargers and related electrostatic converters. This conversion path is available for both the battery charger category and the UPS/switching power supply category: manufacturers already holding an IEC 61558-1 (2009 edition) type-test report can redo differential testing to convert it into a valid CNS 61558-1 report, avoiding a full retest. Alongside the standard update, BSMI also expanded which battery chargers require mandatory inspection in the first place.

    CNS 61558-1 Coverage and Scope Expansion

    CNS 61558-1 applies to two distinct product groups under BSMI’s mandatory inspection scheme:

    1. Battery chargers — “other electrostatic converters” category
    This category covers AC-to-DC power adapters. It does not include the steplessly adjustable DC power supply type, and it excludes medical devices and telecom terminal equipment. In simple terms, this is the general-purpose external adapter that plugs into a wall outlet and converts AC mains power to DC. For this category, CNS 61558-1 fully replaces the previous inspection standard. There is no alternative option. Manufacturers with an existing IEC 61558-1 (2009 edition) report can redo differential testing at the originally designated lab to convert it into a CNS 61558-1 report, rather than starting a full type test from scratch.

    This is also where the scope expansion matters most. Non-3C (non-USB) chargers and DC-input chargers were previously outside mandatory inspection. They are now formally brought under CNS 61558-1 testing. This broadens the range of charger types manufacturers need to certify well beyond the standard USB-output charger.

    2. UPS and switching power supplies — “other switching power supplies” category
    This category covers switching-type AC-to-DC power adapters used with uninterruptible power supply systems and similar equipment. It excludes products designed for HI-END audio use, medical devices, and telecom terminal equipment. Here, CNS 61558-1 is offered as an alternative testing route, paired with a second new standard, CNS 61558-2-16. Manufacturers can choose this route or continue using the existing CNS 15598-1 pathway. The same conversion option applies here too: manufacturers holding an IEC 61558-1 (2009 edition) or IEC 61558-2-16 (2009 or 2013 edition) report can redo differential testing to convert it, instead of retesting from zero.

    Unlike the battery charger category, this group is not affected by the non-3C or DC-input scope expansion. The only change here is the added testing option.

    Most other standards in the announcement remain unchanged. These include CNS 15936, CNS 15598-1, CNS 13783-1, CNS 60335-1/2-29, CNS 13803, CNS 14757-2, and CNS 62040-1. RoHS labeling under CNS 15663 §5 also continues as before.

    Supplementary Table: Affected Product Standards

    Category Product Inspection Standard(s) Inspection Method
    Power Supply Equipment Battery chargers CNS 15936 / CNS 15598-1, or CNS 13783-1 / CNS 60335-1 / CNS 60335-2-29; plus CNS 15663 §5 Certification Registration (Type Test mode + Declaration of Conformity mode)
    Power Supply Equipment Wireless chargers CNS 13803; CNS 15598-1; CNS 15663 §5 Type Approval with batch-by-batch inspection, or Certification Registration (Type Test mode + Declaration of Conformity mode)
    Power Supply Equipment Car cigarette-lighter adapters CNS 15936; CNS 15598-1; CNS 15663 §5 Certification Registration (Type Test mode + Declaration of Conformity mode)
    Power Supply Equipment Other electrostatic converters (AC-DC adapters) CNS 61558-1 (new); CNS 15663 §5 Certification Registration (Type Test mode + Declaration of Conformity mode)
    Information Products UPS (≤400A output) CNS 14757-2; CNS 62040-1; CNS 15663 §5 Certification Registration (Type Test mode + Declaration of Conformity mode), or Type Approval with batch-by-batch inspection
    Information Products Electrostatic converters (ADP/peripherals) CNS 15936; CNS 15598-1; CNS 15663 §5 Certification Registration (Type Test mode + Declaration of Conformity mode)
    Information Products Other switching power supplies CNS 15936; CNS 15598-1 or CNS 61558-1 + CNS 61558-2-16 (new); CNS 15663 §5 Certification Registration (Type Test mode + Declaration of Conformity mode)

    Note: Excludes items classified as medical devices or telecom terminal equipment, per each category’s stated exclusions.

    Note: Excludes items classified as medical devices or telecom terminal equipment, per each category’s stated exclusions.

    Transition Timeline for CNS 61558-1 Compliance

    • Now: BSMI accepts certification registration applications under CNS 61558-1.
    • Existing certificates: Valid until expiry, unchanged models included.
    • Through June 30, 2027: Renewals/extensions still allowed under the old standard.
    • From July 1, 2027: All new applications, renewals, and the expanded charger scope require CNS 61558-1 compliance.

    Key Takeaways

    • CNS 61558-1 is the only newly adopted standard, replacing the AC-DC adapter basis and offering an alternative route for select UPS/switching supplies.
    • The IEC 61558-1 (2009 ed.) differential-testing conversion path is available for both battery chargers and UPS/switching supplies — worth checking with clients before committing to fresh CNS 61558-1 testing.
    • Non-3C and DC-input chargers are newly in scope. Clients making these should start planning now, not in 2027.
    • Full CNS 61558-1 compliance is mandatory from July 1, 2027, giving roughly a 10-month runway from this announcement.
    • The 14-working-day review period (plus 7 for sample testing) means early filing avoids a pre-deadline bottleneck.