CROSS-STANDARD public interest · Wireless / IoT device
China-to-Saudi Arabia Wireless / IoT Device Compliance Gap Matrix (CITC / SASO)
AI-compiled from official public sources — cross-checked by multiple AI models, not human-verified. Informational only; see disclaimer. Public-interest, source-linked comparison of common China Wi-Fi, Bluetooth, and IoT device documentation against Saudi Arabia CITC mandatory radio type approval and CITC mark requirements, SASO/SALEEM EMC conformity assessment (SASO IEC/CISPR 32 and IEC 61000-4 series), SASO/SALEEM electrical safety (SASO IEC 62368-1) including dual-voltage (127V/60Hz and 220V/50Hz) environment, Arabic labelling and Saudi authorized in-country agent requirements, and NCA IoT cybersecurity controls.
Dataset 2026-06-11
Last verified 2026-06-17
6 rows
GAP MATRIX
Compliance Gap Matrix
| Compliance item | Common China baseline | Saudi Arabia (CITC / SASO) | Gap / action | Source + verification date |
|---|---|---|---|---|
| Radio Type Approval — CITC Mandatory Certification and Mark | In China, radio transmitter equipment (Wi-Fi, Bluetooth, Zigbee, cellular) must obtain SRRC (State Radio Regulation of China, under MIIT) type approval before sale or import. The SRRC approval confirms that the device operates on permitted frequencies within allowed output power limits. Terminal equipment connecting to public telecommunications networks additionally requires a MIIT Network Access License (NAL). Testing is conducted by CAICT-accredited laboratories. For in-scope IT equipment with integrated radio, a CCC certification to GB 4943.1 or GB/T 9254 may also be required. Neither SRRC approval, NAL, nor CCC certification issued in China is recognized by CITC — completely separate CITC type approval must be obtained.MIIT Provisions on the Administration of Radio Frequency Allocation — SRRC type approval for radio transmitter equipment MIIT Measures on Telecommunications Equipment Networking Access Verification — Network Access License (NAL) for telecom terminal equipment GB/T 9254 — Information technology equipment, radio disturbance characteristics (EMC baseline linked to CCC scope) |
The Communications, Space and Technology Commission (CITC) of Saudi Arabia requires mandatory type approval for all radio and telecommunications terminal equipment before it may be imported, offered for sale, or used in Saudi Arabia. This covers Wi-Fi, Bluetooth, Zigbee, Z-Wave, cellular, and any wireless radio technology embedded in consumer IoT devices. The type approval process requires submission of technical documentation (test reports to applicable CITC technical specifications, frequency plans, output power data) and device samples to CITC or a CITC-accredited laboratory. Upon approval, CITC issues a type approval certificate valid for a defined period. The CITC mark must appear on the product label in Arabic and English before customs clearance is permitted. Products must operate on frequencies allocated under Saudi spectrum plans aligned with ITU Radio Regulations. Within the GCC (Gulf Cooperation Council), a GCC Mutual Recognition Agreement (MRA) allows a type approval from one GCC member state to be accepted by another GCC state — but this MRA applies only within GCC and does not extend to Chinese, US, or EU approvals. Chinese CCC certification is not recognized by CITC and does not satisfy CITC type approval requirements.Saudi Telecommunications Act and CITC By-Laws — legal basis for mandatory type approval of radio and telecom terminal equipment in Saudi Arabia CITC Technical Specifications for Telecommunications Equipment — radio frequency parameters and technical requirements for type approval GCC MRA on Telecommunications Terminal Equipment — mutual recognition among GCC member states (Bahrain, Kuwait, Oman, Qatar, Saudi Arabia, UAE) only |
Chinese SRRC type approval and MIIT Network Access License are not recognized by CITC. There is no bilateral mutual recognition agreement between China and Saudi Arabia for radio type approvals. A product lawfully sold in China under SRRC must obtain a completely separate CITC type approval certificate before import or sale in Saudi Arabia. The CITC mark in Arabic and English must appear on the product label — Chinese SRRC or CCC labels and markings do not satisfy this requirement. The GCC MRA covers only GCC member states and does not extend to China. Frequencies permitted under SRRC in China that are not allocated under CITC Saudi spectrum plans will require product frequency modification or redesign. Arabic labelling is mandatory on product and packaging.[INFORMATIONAL] CITC type approval is mandatory for all wireless devices (Wi-Fi, Bluetooth, cellular, IoT) before import or sale in Saudi Arabia. Chinese SRRC approval, CCC certification, and MIIT NAL are not accepted by CITC. A separate CITC type approval certificate must be obtained, the CITC mark displayed on the label in Arabic and English, and an authorized Saudi in-country agent appointed for the CITC registration process. The GCC MRA applies only within GCC member states and does not extend to China. | Communications, Space and Technology Commission (CITC), Saudi Arabia2026-06-17 · reference |
| IoT Cybersecurity — NCA Essential Controls and CITC Expanding Mandatory Requirements | China has published GB/T 36951 (Information security techniques — Security techniques for IoT), a voluntary national standard addressing IoT security requirements covering device identity, authentication, access control, data protection, and security updates. For telecom-connected IoT terminal equipment, MIIT network security requirements apply under the Cybersecurity Law and Telecom Regulations. CNCA has published voluntary guidelines on IoT product cybersecurity. China's IoT cybersecurity standards are largely voluntary for general consumer IoT products, with mandatory requirements applying mainly to critical information infrastructure operators and telecom network-connected equipment. Chinese GB/T 36951 IoT security compliance documentation is not recognized by NCA as equivalent to NCA IoT-CSC compliance for Saudi Arabia, and manufacturers must prepare documentation specifically addressing the NCA IoT-CSC control framework.GB/T 36951 — Information security technology — Security techniques for the Internet of Things (voluntary national standard for IoT security in China) PRC Cybersecurity Law (2017) — mandates security requirements for critical information infrastructure operators; voluntary or sector-specific for general IoT |
Saudi Arabia's National Cybersecurity Authority (NCA) has published IoT Cybersecurity Controls (IoT-CSC), an essential controls framework for IoT devices covering secure configuration, identity and access management, data protection, patch management, security monitoring, and incident response. As of 2026, mandatory application of NCA IoT-CSC is required for critical national infrastructure sectors (government, energy, finance, healthcare, and telecommunications operators). For consumer IoT devices sold generally, mandatory NCA IoT-CSC compliance is not yet universally required but is expanding. CITC has separately announced plans to introduce mandatory cybersecurity requirements for IoT devices sold in Saudi Arabia as part of its device regulation roadmap. Manufacturers intending to enter the Saudi market should treat NCA IoT-CSC as the authoritative baseline and prepare technical documentation demonstrating compliance with key controls including: unique device identities, prohibition of default passwords, secure-by-default configuration, secure software update mechanisms, encrypted communications, and minimal data collection and retention. Requirements are expanding and the status of mandatory applicability to consumer IoT devices should be verified with CITC and NCA before export.NCA IoT Cybersecurity Controls (IoT-CSC) — Saudi Arabia NCA essential controls framework for IoT device security (currently mandatory for critical sectors; expanding to broader device categories) CITC IoT Device Regulations Roadmap — announced plans for mandatory cybersecurity requirements for IoT devices sold in Saudi Arabia (timeline to be verified with CITC) |
Saudi Arabia's NCA IoT-CSC framework and CITC's expanding IoT cybersecurity requirements represent a growing compliance requirement that has no direct Chinese domestic equivalent for general consumer IoT devices. Chinese voluntary GB/T 36951 compliance documentation is not accepted by NCA as satisfaction of NCA IoT-CSC controls. Manufacturers should proactively prepare NCA IoT-CSC technical documentation (device security architecture, update management policy, default configuration evidence) even before mandatory requirements are finalized for consumer IoT, as CITC has signalled mandatory requirements are coming. The current mandatory perimeter (critical sectors) may expand to general consumer devices — the timeline should be verified with CITC and NCA before each product launch in Saudi Arabia.[INFORMATIONAL] NCA IoT Cybersecurity Controls (IoT-CSC) are currently mandatory for critical-sector IoT deployments in Saudi Arabia and are expanding. CITC has signalled mandatory cybersecurity requirements for IoT devices sold in Saudi Arabia are forthcoming. Chinese voluntary GB/T 36951 IoT security documentation does not satisfy NCA IoT-CSC requirements. Manufacturers should proactively prepare NCA IoT-CSC-aligned security documentation (no default passwords, unique device IDs, secure update mechanism, encrypted communications) and verify current mandatory scope with CITC and NCA before each Saudi market launch. | National Cybersecurity Authority (NCA), Saudi Arabia2026-06-17 · reference |
| Electrical Safety — SASO IEC 62368-1 under SALEEM (Dual Voltage Environment) | China's mandatory electrical safety standard for audio/video and IT equipment is GB 4943.1 (Safety of information technology equipment — Part 1: General requirements), which aligns with IEC 60950-1 (the predecessor to IEC 62368-1). GB 4943.1 is enforced through the CCC (China Compulsory Certification) scheme administered by CNCA. A newer standard GB/T 42315 aligned with IEC 62368-1 has been issued but its mandatory timeline under CCC should be verified with CNCA. China operates on a single voltage standard: 220V/50Hz with Type A/I plugs; products for China do not need to address dual-voltage environments. Chinese CCC certification to GB 4943.1 is not accepted by SASO as equivalent to SASO IEC 62368-1 conformity, and a SALEEM CoC is required separately for Saudi Arabia.GB 4943.1 — Safety of information technology equipment — Part 1: General requirements (CCC mandatory, aligned with IEC 60950-1, predecessor to IEC 62368-1) GB/T 42315 — Audio/video, information and communication technology equipment safety (aligned with IEC 62368-1, CCC adoption timeline to be verified with CNCA) |
Saudi Arabia requires electrical safety conformity for audio/video, IT, and communications equipment (including wireless IoT devices with power supplies) through SASO's adoption of IEC 62368-1 as a Saudi Technical Regulation (SASO IEC 62368-1 — Audio/video, information and communication technology equipment — Part 1: Safety requirements). Electrical safety assessment is mandatory under the SALEEM conformity assessment program. A SALEEM Certificate of Conformity (CoC) covering electrical safety must be obtained before customs clearance. Saudi Arabia presents a unique dual-voltage environment: 127V/60Hz (used in some western regions, historically linked to US infrastructure) and 220V/50Hz (the predominant national standard aligned with most GCC countries) coexist. Products must either support both voltage ranges (100-240V universal SMPS) or carry clear voltage-specific labelling in Arabic and English indicating the supported voltage. Plug types A, B, and G (BS 1363) are in common use across Saudi Arabia. Products must be evaluated for safety against both voltage environments if intended for national distribution. The SALEEM mark must appear on the product.SASO IEC 62368-1 — Audio/video, information and communication technology equipment — Part 1: Safety requirements (Saudi adoption of IEC 62368-1, superseding SASO IEC 60950-1 for IT equipment) SASO SALEEM Program — mandatory electrical safety conformity assessment and mark for electronic and electrical equipment imported into Saudi Arabia Saudi Electricity Supply Regulations — dual voltage supply environment (127V/60Hz and 220V/50Hz) in Saudi Arabia |
Chinese CCC electrical safety certification to GB 4943.1 is not accepted by SASO as equivalent to SASO IEC 62368-1 conformity. The product must be independently tested and certified to SASO IEC 62368-1 by an accredited laboratory, and a SALEEM CoC obtained before Saudi customs clearance. A critical additional gap is the dual-voltage environment in Saudi Arabia (127V/60Hz + 220V/50Hz): Chinese products designed only for 220V/50Hz may encounter 127V/60Hz supply in some Saudi regions. Products intended for national Saudi distribution should use a universal 100-240V/50-60Hz power supply, and voltage limitations must be clearly labelled in Arabic and English. Plug type compatibility (A, B, G) must also be addressed for the Saudi market, versus China's predominantly Type A/I environment.[INFORMATIONAL] SASO IEC 62368-1 electrical safety conformity, delivered through a SALEEM Certificate of Conformity, is mandatory before wireless/IoT devices with power supplies may be imported or sold in Saudi Arabia. Chinese CCC/GB 4943.1 certification does not substitute. The dual-voltage environment (127V/60Hz + 220V/50Hz) in Saudi Arabia means products must use a universal power supply or carry clear Arabic-language voltage limitation labelling. Plug type compatibility with Saudi sockets (A, B, G) must be verified. | Saudi Standards, Metrology and Quality Organization (SASO) — SALEEM Program2026-06-17 · reference |
| EMC — SASO Adoption of CISPR / IEC Standards for Radiated and Conducted Emissions | China's mandatory EMC standard for information technology and multimedia equipment is GB/T 9254 (Information technology equipment — Radio disturbance characteristics — Limits and methods of measurement), which aligns with CISPR 22 / CISPR 32 but with Chinese national limit adaptations. For IT equipment within CCC scope, EMC compliance to GB/T 9254 is part of the CCC certification process administered by CNCA. For multimedia equipment, GB/T 13837 (corresponding to CISPR 13) covers conducted and radiated disturbances from broadcast receivers and associated equipment. Chinese CNCA-administered CCC EMC compliance to GB/T 9254 or GB/T 13837 is not recognized by SASO and does not satisfy SASO/SALEEM EMC conformity requirements for Saudi Arabia.GB/T 9254 — Information technology equipment, radio disturbance characteristics — limits and methods of measurement (CISPR 22/32 aligned, CCC mandatory scope) GB/T 13837 — Sound and television broadcast receivers and associated equipment — radio disturbance characteristics (CISPR 13 aligned) |
Saudi Arabia, through SASO (Saudi Standards, Metrology and Quality Organization), adopts international IEC and CISPR standards as Saudi Technical Regulations (STRs). For wireless and multimedia IoT devices, the applicable EMC standard is SASO IEC/CISPR 32 (Multimedia Equipment — Electromagnetic Disturbances — Requirements for emission), the Saudi adoption of CISPR 32. This covers radiated and conducted disturbance limits for multimedia and IT devices incorporating wireless modules. SASO EMC conformity assessment is part of the SALEEM mandatory conformity assessment program for covered product categories, which includes electronic and electrical equipment. A Conformity Certificate or Certificate of Conformity (CoC) issued through the SALEEM program is required before products may be cleared through Saudi customs. Testing must be performed by accredited laboratories. The SASO CoC and SALEEM conformity mark must appear on the product. EMC compliance under SASO adopts the equivalent CISPR limits and test methodologies aligned with IEC publications.SASO IEC/CISPR 32 — Multimedia equipment — Electromagnetic disturbances — Requirements for emission (Saudi adoption of CISPR 32) SASO SALEEM Program — mandatory product conformity assessment scheme covering electronic and electrical equipment for import into Saudi Arabia |
Chinese CCC EMC certification to GB/T 9254 or GB/T 13837 is not accepted by SASO as equivalent to SASO IEC/CISPR 32 conformity. The product must be independently re-tested against SASO IEC/CISPR 32 by an accredited laboratory and a SALEEM CoC obtained before import. While the underlying CISPR limits are similar (CISPR 32 is harmonized internationally), the conformity assessment pathway, accreditation, and certificate are entirely separate from CCC. A CoC issued under SALEEM must reference the applicable SASO standard and be obtained prior to Saudi customs clearance.[INFORMATIONAL] SASO IEC/CISPR 32 EMC conformity assessment, issued as a SALEEM Certificate of Conformity, is required before wireless/IoT devices may be imported into Saudi Arabia. Chinese CCC EMC certification under GB/T 9254 does not satisfy this requirement. The product must be independently tested by an accredited laboratory against the applicable SASO standard and a SALEEM CoC obtained prior to customs clearance. | Saudi Standards, Metrology and Quality Organization (SASO)2026-06-17 · reference |
| EMC Immunity and SASO SALEEM Conformity Mark on Product | In China, electromagnetic immunity for IT and multimedia equipment is addressed through GB/T 17626 series (Electromagnetic compatibility — Testing and measurement techniques), the Chinese national adoption of the IEC 61000-4 series. For CCC-certified products, immunity testing to the GB/T 17626 series is typically included as part of the CCC assessment process. For products outside formal CCC scope, voluntary compliance to GB/T 17626 may be demonstrated. Chinese CCC immunity testing to GB/T 17626 is not accepted by SASO as equivalent to conformity with SASO IEC 61000-4 series, and a SALEEM CoC covering immunity must be obtained separately for the Saudi market.GB/T 17626 series — Electromagnetic compatibility — Testing and measurement techniques (Chinese national adoption of IEC 61000-4 series) | In addition to emissions compliance under SASO IEC/CISPR 32, wireless IoT devices sold in Saudi Arabia must demonstrate immunity to electromagnetic disturbances. The applicable immunity standard adopted by SASO is SASO IEC 61000-4 series (Electromagnetic compatibility — Testing and measurement techniques), aligned with IEC 61000-4-2 (ESD), IEC 61000-4-3 (radiated immunity), IEC 61000-4-4 (electrical fast transient), IEC 61000-4-5 (surge), IEC 61000-4-6 (conducted immunity), and IEC 61000-4-8 (power frequency magnetic field). SASO immunity requirements apply for IT and multimedia equipment with wireless radio. The SALEEM mandatory conformity program requires a full CoC covering both emissions and immunity testing, issued by an accredited conformity body. The SALEEM conformity mark must be affixed to the product. Products without a valid SALEEM CoC will be refused at Saudi customs and cannot be placed on the Saudi market.SASO IEC 61000-4-2 — Electromagnetic compatibility — Testing and measurement techniques — ESD immunity test (Saudi adoption of IEC 61000-4-2) SASO IEC 61000-4-3 — Radiated, radio-frequency, electromagnetic field immunity test (Saudi adoption of IEC 61000-4-3) SASO SALEEM Program — mandatory conformity assessment and mark requirement for electronic and electrical equipment imported into Saudi Arabia |
Chinese CCC immunity testing to GB/T 17626 is not accepted by SASO as satisfaction of SASO IEC 61000-4 immunity requirements. The SALEEM CoC must cover both emissions and immunity testing and be issued by an accredited conformity body for the Saudi market. The SALEEM conformity mark must appear on the product. Products imported without a valid SALEEM CoC are refused at customs. Chinese CCC certificates, GB/T 17626 test reports, and Chinese conformity marks do not substitute for SALEEM CoC and markings.[INFORMATIONAL] SASO IEC 61000-4 immunity conformity, covered by the SALEEM Certificate of Conformity with the SALEEM mark on the product, is mandatory for wireless/IoT devices imported into Saudi Arabia. Chinese CCC immunity testing to GB/T 17626 does not satisfy this requirement. A full SALEEM CoC covering both emissions (SASO IEC/CISPR 32) and immunity (SASO IEC 61000-4 series) must be obtained from an accredited conformity body before Saudi customs clearance. | Saudi Standards, Metrology and Quality Organization (SASO) — SALEEM Program2026-06-17 · reference |
| Authorized Saudi In-Country Agent and Arabic Labelling Requirements | For domestic Chinese sales, there is no general requirement for a Chinese manufacturer to appoint an in-country agent — the manufacturer itself or its sales subsidiary may sell directly. For CCC purposes, the applicant for certification may be the Chinese manufacturer or an authorized importer/agent in China. Chinese product labelling must comply with national standards in Chinese (Mandarin), but Arabic labelling is not required. For Chinese export to Saudi Arabia, a Chinese exporter does not automatically satisfy Saudi agent requirements; a Saudi-registered company must be separately appointed. Chinese-language-only labels will not satisfy Saudi mandatory Arabic labelling requirements.CNCA CCC Measures — applicant for CCC may be the domestic manufacturer or authorized importer (no general in-country agent requirement for domestic Chinese sales) GB 5296 series — Consumer product instructions in Chinese (no Arabic labelling requirement for domestic Chinese market) |
Foreign manufacturers seeking CITC type approval and SASO/SALEEM conformity certification in Saudi Arabia must appoint an authorized in-country agent — a Saudi-registered company — to act as the local representative in the registration and approval process. The Saudi agent is responsible for submitting applications to CITC, managing the SALEEM conformity assessment process with SASO, liaising with customs, and maintaining ongoing product compliance records. The agent must be legally established in Saudi Arabia and authorized in writing by the foreign manufacturer. In addition to agent requirements, Arabic labelling is mandatory for all products sold in Saudi Arabia: the product label, packaging, and instruction manual must include Arabic text. Required Arabic label elements for wireless devices include: product name, brand, model number, country of origin, technical specifications (voltage, frequency, power), CITC type approval number, SALEEM conformity mark, warnings, and importer/agent name and address in Saudi Arabia. English labelling alongside Arabic is permitted and expected for CITC mark display. Labels must not include claims that are misleading or not verifiable.CITC Equipment Regulations — requirement for an authorized local agent for foreign manufacturers applying for CITC type approval in Saudi Arabia SASO Technical Regulations on Labelling — Arabic labelling mandatory for products sold in Saudi Arabia, including product name, specifications, country of origin, and conformity marks Saudi Consumer Protection Law — product information in Arabic required for consumer goods placed on the Saudi market |
A Saudi-registered in-country agent is mandatory for foreign manufacturers registering with CITC and SASO/SALEEM — there is no equivalent requirement for Chinese domestic sales. The Chinese manufacturer must identify and appoint a Saudi company as its authorized agent before initiating any CITC or SALEEM applications. Chinese-language-only labels will be rejected at Saudi customs; all mandatory label fields must be provided in Arabic, and the CITC mark must appear in Arabic and English. The Saudi agent's name and address in Saudi Arabia must appear on the product label. This adds a go-to-market lead time and cost item that has no direct Chinese domestic equivalent.[INFORMATIONAL] A Saudi-registered in-country authorized agent is mandatory for foreign manufacturers registering products with CITC and SASO/SALEEM. Chinese manufacturers must appoint a Saudi company before initiating type approval or SALEEM applications. All product labels, packaging, and instruction manuals must include Arabic text; Chinese-language-only labels will not pass Saudi customs. The CITC mark and SALEEM conformity mark must appear in Arabic and English, and the Saudi agent's name and address must be on the product label. | Communications, Space and Technology Commission (CITC), Saudi Arabia2026-06-17 · reference |
E-E-A-T
Named editorial review
Pending named reviewer
Official regulator, standards body, notified body, customs, or primary legal source preferred. Local PDFs are not accepted.
Editorial controlsRows must include publisher, official URL, access date, verification flag, and last_verified before human_reviewed can be true.
SOURCES
Official-source register.
- Communications, Space and Technology Commission (CITC), Saudi Arabia · accessed 2026-06-17 · reference · used in 2 rows
- National Cybersecurity Authority (NCA), Saudi Arabia · accessed 2026-06-17 · reference · used in 1 rows
- Saudi Standards, Metrology and Quality Organization (SASO) — SALEEM Program · accessed 2026-06-17 · reference · used in 2 rows
- Saudi Standards, Metrology and Quality Organization (SASO) · accessed 2026-06-17 · reference · used in 1 rows