Cybersecurity — CERT.ba / AIS Advisory (No Mandatory Product Certification)?

Bosnia and Herzegovina does not currently mandate cybersecurity product certification for general consumer wireless / IoT devices. CERT.ba issues non-binding advisories; AIS oversees national information security policy. Entity-level governance fragmentation (Republika Srpska / Federation of BiH / Brčko District) means cybersecurity requirements may evolve differently across BiH. Voluntary alignment with ETSI EN 303 645 or CERT.ba guidelines is recommended as a risk mitigation measure, given BiH's EU accession candidacy and the likelihood of future mandatory requirements. Chinese GB/T 36951 or MIIT cybersecurity documentation is not required or recognised. Monitor AIS, RAK, and CERT.ba announcements for regulatory changes.

Electrical Safety — IEC 62368-1 / 230 V 50 Hz Type C/F (ATK)?

Electrical safety certification to IEC 62368-1 / EN IEC 62368-1 is mandatory for audio/video and IT/communications equipment on the BiH market, assessed through ATK. CCC (GB 4943.1) is not recognised. Products must use Type C/F (Schuko) plugs for 230 V / 50 Hz mains. EN IEC 62368-1:2020+A11 test reports from CE certification are generally reusable for ATK assessment. Verify with ATK or a qualified local representative before market placement.

EMC — Radio Frequency Performance (EN/ETSI, ATK)?

RF performance testing to EN/ETSI standards is mandatory as the technical basis for RAK type approval in Bosnia and Herzegovina. SRRC approval is not recognised. Existing EN 300 328 / EN 301 893 test reports from CE certification are generally reusable for RAK, but confirm format and accreditation scope acceptance with RAK or a local representative. ATK general product conformity requirements apply in parallel.

EMC — Conducted and Radiated Emissions (EN 301 489, ATK)?

EN 301 489-series EMC compliance is mandatory for RAK type approval and ATK product conformity assessment in Bosnia and Herzegovina. GB/T 9254 or GB 17625 test reports are not accepted. Existing EN 301 489 CE test reports can typically be reused for RAK/ATK applications, reducing costs; confirm format and scope acceptance with RAK or ATK before submission.

Local Authorised Importer / Agent and Bosnian/Croatian/Serbian Language Labelling?

Appointment of a locally-registered BiH authorised importer or representative, Bosnian/Croatian/Serbian language labelling of product and user documentation, and dual RAK/ATK certification are mandatory for market access in Bosnia and Herzegovina. There is no Chinese-side equivalent. Entity-level governance complexity (Republika Srpska / Federation of BiH / Brčko District) may require additional local legal advice. Verify specific importer registration and labelling obligations with a qualified BiH legal or regulatory professional.

Radio / Telecom Terminal Equipment Type Approval (RAK)?

A separate RAK type approval certificate is mandatory for all radio and telecom terminal equipment placed on the Bosnia and Herzegovina market. CE DoC, CCC, and FCC approvals alone are not sufficient. EN/ETSI test data generated for EU/CE purposes may be reused in the RAK application but does not substitute for the RAK certificate. CCC is not recognised. BiH entity governance complexity should be verified with RAK or a qualified local representative before market placement.

CROSS-STANDARD public interest · Wireless / IoT device

China-to-Bosnia and Herzegovina Wireless / IoT Device Compliance Gap Matrix (RAK / ATK)

Name: China-to-Bosnia and Herzegovina Wireless / IoT Device Compliance Gap Matrix (RAK / ATK)
Creator: Cross-Standard
License: https://creativecommons.org/licenses/by/4.0/

AI-compiled from official public sources — cross-checked by multiple AI models, not human-verified. Informational only; see disclaimer. Public-interest, source-linked comparison of common China wireless and IoT device documentation against Bosnia and Herzegovina RAK type approval requirements under the Law on Communications, covering radio type approval (RAK — Regulatorna agencija za komunikacije), product conformity (ATK — Agencija za tehničku kontrolu), EMC testing to EN/ETSI standards, electrical safety (230 V / 50 Hz, Type C/F), local importer obligations, Bosnian/Croatian/Serbian language labelling, and cybersecurity advisory alignment. BiH has complex entity governance: Republika Srpska, Federation of BiH, and Brčko District.

Dataset 2026-06-11 Last verified 2026-06-17 6 rows

GAP MATRIX

Compliance Gap Matrix

Gap matrix
Compliance item	Common China baseline	Bosnia and Herzegovina (RAK / ATK)	Gap / action	Source + verification date
Cybersecurity — CERT.ba / AIS Advisory (No Mandatory Product Certification)	China has mandatory cybersecurity requirements for network-connected products under MIIT and the Cybersecurity Law, including MLPS (Multi-Level Protection Scheme) obligations for systems, and emerging mandatory cybersecurity product certification for certain IoT categories under CNCA. GB/T 36951 (IoT security) and MIIT smart device security requirements are applicable benchmarks.Cybersecurity Law of the People's Republic of China (2017) MLPS — Multi-Level Protection Scheme (等级保护) — systems-level obligation GB/T 36951-2018 — IoT security reference model and general requirements MIIT Measures on the Administration of Smart Connected Vehicle Cybersecurity (product-level, sector-specific) CNCA emerging mandatory cybersecurity certification for select IoT product categories	Bosnia and Herzegovina does not yet have a mandatory cybersecurity certification scheme for consumer IoT and wireless devices equivalent to the EU's RED Article 3.3(d)-(f) / EN 18031 mandatory requirements (effective 1 August 2025 in the EU). The Agency for Information Society (AIS — Agencija za informacijsko drustvo, part of the Council of Ministers) and the national CERT (CERT.ba) issue cybersecurity advisories and guidelines relevant to network-connected products. BiH's complex entity governance means cybersecurity policy implementation may differ between Republika Srpska, Federation of BiH, and Brčko District. As an EU accession candidate, BiH may progressively adopt EU cybersecurity product requirements under NIS2 and the EU Cyber Resilience Act. Chinese CCC or MIIT cybersecurity certifications are not required or recognised. Exporters should monitor regulatory developments and consider voluntary ETSI EN 303 645 alignment as risk mitigation.Law on Information Security of Bosnia and Herzegovina (Zakon o informacijskoj bezbjednosti BiH) AIS — Agency for Information Society of Bosnia and Herzegovina (Agencija za informacijsko drustvo) CERT.ba — BiH National Computer Emergency Response Team (advisories and guidelines) ETSI EN 303 645 V2.1.1 — Cyber Security for Consumer IoT (advisory benchmark; not yet mandated in BiH) EU Cyber Resilience Act (CRA) — future obligation for EU candidate states including BiH NIS2 Directive — EU network and information security (transposition expected as part of EU accession)	Bosnia and Herzegovina currently has no mandatory IoT device cybersecurity product certification equivalent to China's emerging CNCA mandatory scheme or the EU's mandatory RED Art. 3.3(d)-(f) requirements. However, BiH's EU accession trajectory means mandatory cybersecurity product requirements may be adopted in the medium term, mirroring EU requirements under the Cyber Resilience Act and NIS2. Chinese GB/T 36951 or MIIT cybersecurity certifications are not recognised in BiH, nor required. Entity-level governance fragmentation (Republika Srpska / Federation of BiH) may create divergent cybersecurity implementation timelines within BiH. Exporters should conduct voluntary compliance against ETSI EN 303 645 or CERT.ba advisories as a risk mitigation measure ahead of potential future mandatory requirements.[INFORMATIONAL] Bosnia and Herzegovina does not currently mandate cybersecurity product certification for general consumer wireless / IoT devices. CERT.ba issues non-binding advisories; AIS oversees national information security policy. Entity-level governance fragmentation (Republika Srpska / Federation of BiH / Brčko District) means cybersecurity requirements may evolve differently across BiH. Voluntary alignment with ETSI EN 303 645 or CERT.ba guidelines is recommended as a risk mitigation measure, given BiH's EU accession candidacy and the likelihood of future mandatory requirements. Chinese GB/T 36951 or MIIT cybersecurity documentation is not required or recognised. Monitor AIS, RAK, and CERT.ba announcements for regulatory changes.	CERT.ba — BiH National Computer Emergency Response Team2026-06-17 · reference
Electrical Safety — IEC 62368-1 / 230 V 50 Hz Type C/F (ATK)	China uses 220 V / 50 Hz mains with Type A and Type I sockets (GB 2099.1 / GB 2099.3). Electrical safety for IT and AV equipment is based on GB 4943.1-2022 (equivalent to IEC 62368-1 with national deviations) under the CCC mandatory certification scheme administered by CNCA. CCC test reports use GB 4943.1, which differs from EN IEC 62368-1 in national deviations and plug/socket scope.GB 4943.1-2022 — Audio/video, IT and communications technology equipment — Safety (IEC 62368-1 with national deviations) CCC — China Compulsory Certification (CNCA administered; GB 4943.1 scope) China: 220 V / 50 Hz; IEC 60083 Type A and Type I plug sockets (GB 2099.1 / GB 2099.3)	Bosnia and Herzegovina operates on 230 V / 50 Hz mains supply with Type C and Type F (Schuko) plug sockets, consistent with the European continental standard. Electrical safety for audio/video, IT, and communication technology equipment is governed by IEC 62368-1, progressively aligned with the EU EN IEC 62368-1:2020+A11:2021 standard, administered through ATK (Agencija za tehničku kontrolu) as part of the product conformity assessment framework. Products must be tested and certified to this standard for the BiH market. Chinese-market power supplies designed for 220 V / 50 Hz / Type A or I plugs require adaptation; the mains voltage range difference is minor (220 V vs 230 V nominal) but plug type and certification basis differ. CCC (based on GB 4943.1) is not recognised in BiH.IEC 62368-1:2018 / EN IEC 62368-1:2020+A11:2021 — Audio/video, IT and communications technology equipment — Safety requirements (progressively adopted in BiH) Bosnia and Herzegovina: 230 V / 50 Hz mains supply; IEC 60083 Type C (Europlug) and Type F (Schuko) plug sockets ATK (Agencija za tehničku kontrolu) — product conformity and safety certification body RAK type approval application — safety section supported by IEC 62368-1 test report	CCC (GB 4943.1) is not recognised in Bosnia and Herzegovina. A new IEC 62368-1 / EN IEC 62368-1 safety test report is required for the BiH market through ATK. If the product already holds EU CE certification with an EN IEC 62368-1:2020+A11 test report, ATK will generally accept it. Plug type must be changed from Chinese Type A/I to European Type C/F (Schuko). The nominal mains voltage difference (220 V CN vs 230 V BiH) is within the 10% tolerance of universal power supplies in most modern products.[INFORMATIONAL] Electrical safety certification to IEC 62368-1 / EN IEC 62368-1 is mandatory for audio/video and IT/communications equipment on the BiH market, assessed through ATK. CCC (GB 4943.1) is not recognised. Products must use Type C/F (Schuko) plugs for 230 V / 50 Hz mains. EN IEC 62368-1:2020+A11 test reports from CE certification are generally reusable for ATK assessment. Verify with ATK or a qualified local representative before market placement.	ATK — Agency for Technical Certification of Bosnia and Herzegovina2026-06-17 · reference
EMC — Radio Frequency Performance (EN/ETSI, ATK)	China's SRRC radio type approval process applies MIIT-mandated technical requirements based on GB/T and YD/T standards for frequency performance. These are not harmonised with ETSI/EN standards. SRRC approval covers frequency, modulation, and transmitter power requirements specific to China's allocated spectrum.MIIT SRRC Radio Type Approval — 无线电发射设备型号核准 YD/T 1214-2006 (2.4 GHz WLAN technical requirements) YD/T 1432-2017 (5 GHz WLAN technical requirements) GB 15629.11 / IEEE 802.11 aligned national standards MIIT spectrum management regulations (frequency allocation table)	Bosnia and Herzegovina aligns with EN/ETSI harmonised standards for radio frequency performance testing as part of its EU accession candidacy (applied 2022). ATK (Agencija za tehničku kontrolu — Agency for Technical Certification) handles general product conformity and safety, while RAK type approval requires RF performance test reports based on EN/ETSI standards. Standards include EN 300 328 (2.4 GHz Wi-Fi / Bluetooth) and EN 301 893 (5 GHz Wi-Fi). RAK manages frequency spectrum aligned with the ITU and EU radio frequency decisions. Chinese investment in BiH infrastructure (the 'Highway of Peace' and related projects) underscores commercial interest, but regulatory pathways remain EU-aligned.EN 300 328 V2.2.2 — Wideband transmission systems; 2.4 GHz ISM band (Wi-Fi, Bluetooth) EN 301 893 V2.1.1 — 5 GHz high-performance RLAN (Wi-Fi 5/6) EN 300 440 V2.2.1 — Short range devices (868 MHz, 433 MHz IoT) EN 301 511 V12.5.1 — GSM 900/1800 MHz EN 301 908-1 — IMT cellular networks (LTE) ATK (Agencija za tehničku kontrolu) — product conformity and technical certification RAK (Regulatorna agencija za komunikacije) — spectrum management and type approval	SRRC approval and GB/YD standards are not recognised by RAK. New RF performance testing to EN/ETSI standards is required for RAK type approval. If the product already holds CE marking with EN 300 328 / EN 301 893 test reports, RAK generally accepts those reports, significantly reducing re-testing costs. Products without prior CE testing must commission fresh EN/ETSI tests from an accredited laboratory. ATK conformity certification for general product safety is a parallel requirement to the RAK radio type approval.[INFORMATIONAL] RF performance testing to EN/ETSI standards is mandatory as the technical basis for RAK type approval in Bosnia and Herzegovina. SRRC approval is not recognised. Existing EN 300 328 / EN 301 893 test reports from CE certification are generally reusable for RAK, but confirm format and accreditation scope acceptance with RAK or a local representative. ATK general product conformity requirements apply in parallel.	RAK — Regulatory Agency for Communications of Bosnia and Herzegovina2026-06-17 · reference
EMC — Conducted and Radiated Emissions (EN 301 489, ATK)	China applies GB/T 9254.1-2021 for radiated and conducted emissions from information technology and telecom equipment, and GB 17625.1-2022 for harmonic current emissions. These are mandatory national standards distinct from and not interchangeable with the EN 301 489 series.GB/T 9254.1-2021 — Information technology equipment — Radio disturbance characteristics GB 17625.1-2022 — Electromagnetic compatibility — Harmonic current emissions (IEC 61000-3-2) GB/T 17618-2015 — Limits and methods of measurement of immunity characteristics (IEC 61000-4 series)	EMC requirements for conducted and radiated disturbance emissions from radio equipment and telecom terminal equipment in Bosnia and Herzegovina are based on EN 301 489-1 (general EMC requirements for radio equipment) and product-specific EN 301 489-x companion standards, consistent with EU practice. ATK (Agencija za tehničku kontrolu) handles product conformity assessment. Compliance with these EMC standards must be demonstrated as part of the RAK type approval application and ATK conformity assessment process. BiH's EU candidacy means progressive alignment with EU EMC requirements.EN 301 489-1 V2.2.3 — EMC standard for radio equipment; Part 1: Common technical requirements EN 301 489-17 V3.2.4 — EMC specific conditions for wideband data and HIPERLAN equipment (Wi-Fi / BT) EN 301 489-3 — Short range devices (SRD) EN 301 489-52 — Cellular / LTE terminal equipment ATK (Agencija za tehničku kontrolu) — BiH product conformity assessment body	GB/T 9254 and GB 17625 test data are not accepted by RAK or ATK in place of EN 301 489 series reports. If the product already has CE-compliant EN 301 489-1 / EN 301 489-17 test reports, RAK and ATK generally accept these. Without prior CE testing, new EN 301 489 tests must be commissioned from an accredited laboratory. The EN 301 489 series measures different disturbance limits and test methods compared with GB/T 9254, so results are not directly transferable.[INFORMATIONAL] EN 301 489-series EMC compliance is mandatory for RAK type approval and ATK product conformity assessment in Bosnia and Herzegovina. GB/T 9254 or GB 17625 test reports are not accepted. Existing EN 301 489 CE test reports can typically be reused for RAK/ATK applications, reducing costs; confirm format and scope acceptance with RAK or ATK before submission.	ATK — Agency for Technical Certification of Bosnia and Herzegovina2026-06-17 · reference
Local Authorised Importer / Agent and Bosnian/Croatian/Serbian Language Labelling	China does not require a locally-established importer for foreign wireless devices in the same way; instead, MIIT type approval (SRRC / NAL) is obtained by the manufacturer or their agent directly. Chinese-market product labelling is in Chinese (Mandarin) and must comply with GB standards for labelling content. There is no direct Chinese equivalent to the BiH authorised importer obligation or trilingual labelling requirement.MIIT SRRC Radio Type Approval — applicant may be manufacturer or authorised agent (no mandatory local importer entity required) GB 5296.1-2012 — Instructions for use of consumer products (Chinese language labelling) GB 7247 / GB 10408 product label content requirements	Foreign manufacturers placing radio equipment and telecom terminal equipment on the Bosnia and Herzegovina market must appoint a locally authorised importer or representative established in BiH. The authorised importer is responsible for ensuring the product holds a valid RAK type approval certificate and an ATK conformity certificate, and that product labelling and user documentation are in Bosnian, Croatian, and/or Serbian — the three official languages of BiH (Bosnian and Croatian use Latin script; Serbian may use both Latin and Cyrillic). Product labels must include the importer's name, address, and contact information. User manuals and safety instructions must be available in official BiH languages. BiH's complex entity governance (Republika Srpska, Federation of BiH, and Brčko District) may require attention to entity-specific labelling or packaging requirements. CE, CCC, and FCC marks alone do not satisfy BiH market access requirements. Significant Chinese commercial presence in BiH (infrastructure investment) does not exempt products from regulatory compliance.Law on Communications of Bosnia and Herzegovina (Zakon o komunikacijama) — importer obligations for radio equipment RAK type approval conditions — authorised importer / representative requirement ATK conformity certification requirements — importer responsibility for product safety Law on Consumer Protection of Bosnia and Herzegovina — official language labelling obligation (Bosnian, Croatian, Serbian) Law on General Product Safety of Bosnia and Herzegovina — market surveillance and importer responsibilities	China has no equivalent local-importer mandate for the BiH market. Manufacturers must establish or contract a legally-registered BiH entity to act as authorised importer/representative before RAK type approval and ATK conformity certificate can be activated for market placement. All product labelling and user documentation must be translated into Bosnian, Croatian, and/or Serbian (the three official languages). BiH entity governance (Republika Srpska, Federation of BiH, Brčko District) may add further labelling or registration obligations at the entity level. This is an additional compliance step with no analogue in the SRRC/NAL process.[INFORMATIONAL] Appointment of a locally-registered BiH authorised importer or representative, Bosnian/Croatian/Serbian language labelling of product and user documentation, and dual RAK/ATK certification are mandatory for market access in Bosnia and Herzegovina. There is no Chinese-side equivalent. Entity-level governance complexity (Republika Srpska / Federation of BiH / Brčko District) may require additional local legal advice. Verify specific importer registration and labelling obligations with a qualified BiH legal or regulatory professional.	RAK — Regulatory Agency for Communications of Bosnia and Herzegovina2026-06-17 · reference
Radio / Telecom Terminal Equipment Type Approval (RAK)	China requires SRRC radio type approval (MIIT) for all intentional radio transmitters and a separate MIIT Network Access License (NAL / 进网许可证) for telecom terminal equipment connected to public networks. Applicable GB standards include GB/T 9254.1-2021 and GB 17625.1-2022 for EMC. CCC applies to in-scope products under the RF / electrical safety catalogue.MIIT SRRC Radio Type Approval — 无线电发射设备型号核准 (MIIT Order No. 14, 2019) MIIT Network Access License (NAL) — 电信设备进网许可管理办法 (MIIT Order No. 2, 2017) GB/T 9254.1-2021 (Information technology equipment — radio disturbance characteristics) GB 17625.1-2022 (Electromagnetic compatibility — harmonic current emissions) CCC — China Compulsory Certification (GB 4943.1, GB 9254 scope)	All radio equipment and telecom terminal equipment placed on the Bosnia and Herzegovina market requires a mandatory RAK type approval certificate under BiH's Law on Communications (Zakon o komunikacijama). RAK (Regulatorna agencija za komunikacije) is the state-level NRA covering radio spectrum, type approval, and telecom terminal equipment. CE Declaration of Conformity, CCC, or FCC approvals alone are NOT accepted as substitutes for RAK certification. BiH aligns with EN/ETSI standards as an EU accession candidate, and EN/ETSI-based test reports are accepted as technical evidence in RAK applications, providing a 'CE-lite' pathway — test to EN/ETSI standards, then obtain a separate RAK certificate. BiH's complex entity governance (Republika Srpska entity and Federation of BiH entity, plus Brčko District) requires attention, but RAK operates at the state (BiH) level for type approval, providing a single national framework. CCC is not recognised in BiH.Law on Communications of Bosnia and Herzegovina (Zakon o komunikacijama, Official Gazette of BiH No. 31/03, 75/06, 32/10, 98/12) RAK Rulebook on Type Approval of Radio Equipment and Telecom Terminal Equipment EN 300 328 V2.2.2 (2.4 GHz Wi-Fi / BT wideband data) EN 301 893 V2.1.1 (5 GHz Wi-Fi) EN 300 440 V2.2.1 (short-range devices) EN 301 511 / EN 301 908 (cellular GSM / LTE)	A new RAK type approval certificate is required for Bosnia and Herzegovina — SRRC approval, CCC, and FCC marks are not recognised. EN/ETSI test reports generated for CE marking can be reused in the RAK application to avoid duplicative radio and EMC testing, but cannot substitute the certificate itself. BiH entity-level governance adds complexity: confirm with RAK whether entity-level supplementary filings are required alongside the state-level certificate for Republika Srpska or Federation of BiH jurisdictions.[INFORMATIONAL] A separate RAK type approval certificate is mandatory for all radio and telecom terminal equipment placed on the Bosnia and Herzegovina market. CE DoC, CCC, and FCC approvals alone are not sufficient. EN/ETSI test data generated for EU/CE purposes may be reused in the RAK application but does not substitute for the RAK certificate. CCC is not recognised. BiH entity governance complexity should be verified with RAK or a qualified local representative before market placement.	RAK — Regulatory Agency for Communications of Bosnia and Herzegovina2026-06-17 · reference

INFORMATIONAL ONLY

Informational only / not a certification conclusion

AI-compiled, not human-verified. This comparison is generated and cross-checked by multiple AI models from public official sources; it has not been reviewed by a named human expert and may contain errors or out-of-date items. Confirm every requirement directly with the official regulator or standards body and a qualified professional before relying on it. Nothing here is legal, certification, customs, or market-access advice.

This page is an informational comparison aid, not a certification decision, RAK type approval, ATK conformity certificate, legal opinion, customs determination, or market-access approval. Exporters, importers, and device manufacturers should verify current Bosnia and Herzegovina regulations, applicable standards, entity-level obligations, labelling requirements, and market-entry obligations with qualified regulatory professionals before importation or sale in Bosnia and Herzegovina.

E-E-A-T

Named editorial review

Pending named reviewer

Official regulator, standards body, notified body, customs, or primary legal source preferred. Local PDFs are not accepted.

Editorial controls

Rows must include publisher, official URL, access date, verification flag, and last_verified before human_reviewed can be true.

SOURCES

Official-source register.

CERT.ba — BiH National Computer Emergency Response Team · accessed 2026-06-17 · reference · used in 1 rows
ATK — Agency for Technical Certification of Bosnia and Herzegovina · accessed 2026-06-17 · reference · used in 2 rows
RAK — Regulatory Agency for Communications of Bosnia and Herzegovina · accessed 2026-06-17 · reference · used in 3 rows