Cybersecurity — CERT-UA Scrutiny and Decree 518 Obligations?

Ukrainian cybersecurity obligations under the Law No. 2163-VIII and CERT-UA scrutiny apply to imported foreign electronics, with heightened review of Chinese-origin wireless and IoT devices. Chinese domestic cybersecurity certifications carry no recognition in Ukraine. No standardised product-level cybersecurity certification pathway equivalent to EU RED Art. 3.3 / EN 18031 exists in Ukraine at this time; however, exporters should disclose firmware management, cloud data routing, and chip provenance to Ukrainian importers and be prepared for enhanced security review, particularly for deployments in critical infrastructure or government adjacent environments. The regulatory environment is actively evolving — verify current requirements with qualified Ukrainian legal counsel.

Electrical Safety — 230 V / 50 Hz / Type C/F (DSTU IEC 62368-1, UkrSEPRO)?

DSTU IEC 62368-1 electrical safety assessment and UkrSEPRO UR mark are mandatory for mains-powered wireless devices sold in Ukraine. CCC is not recognised. EN IEC 62368-1:2020+A11 CE test reports may be reused as technical evidence under the EU Association Agreement pathway. Hardware adaptation from Type A / 220 V to Type C/F / 230 V is required for China-market configurations. Assess processing timelines with a qualified Ukrainian representative given conflict-related disruption to government services.

EMC — Radio Frequency Performance (DSTU EN harmonised standards, DSSU)?

RF performance testing to DSTU EN standards is mandatory as the technical basis for the NKRZI conformity declaration in Ukraine. SRRC approval and GB/YD test reports are not accepted. Existing EN 300 328 / EN 301 893 CE test reports are generally reusable as technical evidence for the NKRZI declaration, reducing costs; confirm report format and accreditation scope acceptance with NKRZI or a qualified local representative before submission.

EMC — Conducted and Radiated Emissions (DSTU EN 301 489, DSSU)?

DSTU EN 301 489-series EMC compliance is mandatory as technical evidence for the NKRZI conformity declaration in Ukraine. GB/T 9254 or GB 17625 test reports are not accepted. Existing EN 301 489 CE test reports can typically be reused as technical evidence for NKRZI applications, reducing costs; confirm format and scope acceptance with NKRZI or a qualified local representative before submission.

Local Importer / Authorised Representative Obligation (Ukraine)?

A locally registered Ukrainian importer or authorised representative is mandatory for foreign manufacturers placing radio or telecom equipment on the Ukrainian market. There is no Chinese regulatory equivalent. Beyond this legal obligation, practical market access in Ukraine is significantly impacted by ongoing conflict — banking, logistics, and partner operational continuity must be independently assessed with qualified in-country legal and commercial advisors before export commitment.

Radio / Telecom Terminal Equipment Conformity Declaration (NKRZI / UR mark)?

A separate NKRZI conformity declaration and UkrSEPRO UR mark are mandatory for all radio and telecom terminal equipment placed on the Ukrainian market. CE DoC and CCC are not sufficient alone. EN/ETSI test data generated for EU/CE purposes may be reused as technical evidence under the EU Association Agreement pathway, but does not substitute the NKRZI declaration itself. Practical market access is significantly affected by ongoing conflict — verify current customs, logistics, and banking channels with qualified in-country partners before export.

CROSS-STANDARD public interest · Wireless / IoT device

China-to-Ukraine Wireless / IoT Device Compliance Gap Matrix (NKRZI / UkrSEPRO)

Name: China-to-Ukraine Wireless / IoT Device Compliance Gap Matrix (NKRZI / UkrSEPRO)
Creator: Cross-Standard
License: https://creativecommons.org/licenses/by/4.0/

AI-compiled from official public sources — cross-checked by multiple AI models, not human-verified. Informational only; see disclaimer. Public-interest, source-linked comparison of common China wireless and IoT device documentation against Ukrainian NKRZI conformity declaration and UkrSEPRO UR mark requirements under the Law on Electronic Communications, covering radio conformity declaration, EMC (DSTU EN harmonised standards via DSSU), electrical safety (230 V / 50 Hz, Type C/F), local Ukrainian importer obligation, and CERT-UA cybersecurity scrutiny under Decree 518.

Dataset 2026-06-11 Last verified 2026-06-17 6 rows

GAP MATRIX

Compliance Gap Matrix

Gap matrix
Compliance item	Common China baseline	Ukraine (NKRZI / UkrSEPRO)	Gap / action	Source + verification date
Cybersecurity — CERT-UA Scrutiny and Decree 518 Obligations	China's cybersecurity framework for electronics includes MIIT network access license (NAL) conditions covering basic cybersecurity requirements, GB/T 22239-2019 (cybersecurity graded protection — Multi-Level Protection Scheme, MLPS), and product security requirements under the Cybersecurity Law of the People's Republic of China (2017). These Chinese-market cybersecurity certifications and standards are not recognised in Ukraine and carry no weight with CERT-UA or Ukrainian security authorities.Cybersecurity Law of the People's Republic of China (2017) GB/T 22239-2019 — Information security technology — Baseline for classified protection of cybersecurity (MLPS 2.0) MIIT Network Access License (NAL) — cybersecurity conditions for telecom terminal equipment MIIT IoT security requirements (YD/T 3628-2019 and related standards)	Ukraine's cybersecurity framework is governed by the Law of Ukraine on Basic Principles of Ensuring Cybersecurity of Ukraine No. 2163-VIII (2017) and Presidential Decree No. 447/2021 (implementing National Security and Defense Council cybersecurity decisions). CERT-UA (the Government Computer Emergency Response Team of Ukraine, operating under the State Special Communications Service) is the national cybersecurity incident response body. Foreign electronics, and in particular equipment of Chinese origin, are subject to heightened scrutiny by Ukrainian security authorities given the geopolitical context. Importers should be prepared for enhanced due diligence on software components, firmware update mechanisms, data transmission paths, and embedded connectivity features. There is no standalone mandatory product cybersecurity certification mark analogous to the EU RED Article 3.3 / EN 18031 system, but regulatory review by CERT-UA and sectoral restrictions on foreign electronics in critical infrastructure environments apply.Law of Ukraine on Basic Principles of Ensuring Cybersecurity of Ukraine No. 2163-VIII (2017) Presidential Decree No. 447/2021 — National Cybersecurity Strategy implementation CERT-UA (Government Computer Emergency Response Team of Ukraine) — State Special Communications Service Law of Ukraine on Protection of Personal Data No. 2297-VI (2010, as amended) State Special Communications Service of Ukraine — regulations on foreign electronics in critical sectors	Chinese domestic cybersecurity certifications (MLPS, NAL cybersecurity conditions, Chinese Cybersecurity Law compliance) are not recognised by Ukrainian authorities and provide no compliance credit with CERT-UA. Ukrainian security authorities apply heightened scrutiny to Chinese-origin electronics, particularly in government, critical infrastructure, defence-adjacent, and public-safety sectors. Exporters of wireless and IoT devices to Ukraine should be prepared to disclose firmware update procedures, cloud service data routing (including whether data transits Chinese servers), and embedded chip provenance. There is no standardised product-level cybersecurity certification pathway in Ukraine equivalent to EU RED Art. 3.3 / EN 18031 at this time, but the regulatory landscape is evolving rapidly given the conflict context.[INFORMATIONAL] Ukrainian cybersecurity obligations under the Law No. 2163-VIII and CERT-UA scrutiny apply to imported foreign electronics, with heightened review of Chinese-origin wireless and IoT devices. Chinese domestic cybersecurity certifications carry no recognition in Ukraine. No standardised product-level cybersecurity certification pathway equivalent to EU RED Art. 3.3 / EN 18031 exists in Ukraine at this time; however, exporters should disclose firmware management, cloud data routing, and chip provenance to Ukrainian importers and be prepared for enhanced security review, particularly for deployments in critical infrastructure or government adjacent environments. The regulatory environment is actively evolving — verify current requirements with qualified Ukrainian legal counsel.	CERT-UA — Government Computer Emergency Response Team of Ukraine (State Special Communications Service)2026-06-17 · reference
Electrical Safety — 230 V / 50 Hz / Type C/F (DSTU IEC 62368-1, UkrSEPRO)	China applies GB 4943.1-2022 (Safety of audio/video, information technology, and communications technology equipment) under the mandatory CCC scheme for in-scope products. China operates at 220 V / 50 Hz with Type A (and Type I) plugs. CCC electrical safety certification does not carry recognition in Ukraine; DSTU IEC 62368-1 assessment under UkrSEPRO is required separately.GB 4943.1-2022 — Safety of audio/video, information technology and communications technology equipment CCC — China Compulsory Certification (CNCA) — electrical safety catalogue China power standard: 220 V / 50 Hz, Type A plug (GB 2099.1) GB 17625.1-2022 — Harmonic current emissions (IEC 61000-3-2)	Ukraine operates on a 230 V / 50 Hz power supply with Type C and Type F (Schuko-compatible) plug standards, consistent with the European continental standard. Electrical safety for audio/video, information technology, and communications equipment is assessed against DSTU IEC 62368-1 (the Ukrainian adoption of IEC 62368-1:2018, aligned with EN IEC 62368-1:2020+A11). Products must be assessed under the UkrSEPRO national conformity assessment system and bear the UR mark. CCC electrical safety certification (GB 4943.1) is not recognised. Chinese domestic products rated 220 V / 50 Hz with Type A plug are physically incompatible with Ukrainian Type C/F sockets — hardware redesign including plug type and voltage/frequency marking is required.DSTU IEC 62368-1:2019 — Audio/video, information and communication technology equipment — Part 1: Safety requirements (aligned with IEC 62368-1:2018 / EN IEC 62368-1:2020+A11) UkrSEPRO national conformity assessment system — UR mark Ukraine power standard: 230 V / 50 Hz, Type C / Type F (Schuko) plugs Law of Ukraine on Conformity Assessment No. 2406-III (as amended) DSSU (State Standard of Ukraine) — DSTU standards catalogue	CCC (GB 4943.1) electrical safety certification is not recognised in Ukraine. A new DSTU IEC 62368-1 assessment under UkrSEPRO is required. If the product already holds EN IEC 62368-1:2020+A11 CE test reports, these are generally accepted by NKRZI as technical evidence (EU Association Agreement alignment), reducing re-testing costs. Products designed for China's 220 V / Type A configuration require hardware adaptation (Type C/F plug, 230 V compatibility verification, updated labelling) for Ukraine. Conflict-related disruption may delay UkrSEPRO assessment processing times.[INFORMATIONAL] DSTU IEC 62368-1 electrical safety assessment and UkrSEPRO UR mark are mandatory for mains-powered wireless devices sold in Ukraine. CCC is not recognised. EN IEC 62368-1:2020+A11 CE test reports may be reused as technical evidence under the EU Association Agreement pathway. Hardware adaptation from Type A / 220 V to Type C/F / 230 V is required for China-market configurations. Assess processing timelines with a qualified Ukrainian representative given conflict-related disruption to government services.	DSSU — State Standard of Ukraine (Ukrmetrteststandard)2026-06-17 · reference
EMC — Radio Frequency Performance (DSTU EN harmonised standards, DSSU)	China's SRRC radio type approval process applies MIIT-mandated technical requirements based on YD/T and GB standards for frequency performance. These are not harmonised with ETSI/EN standards. SRRC approval covers frequency, modulation, and transmitter power requirements specific to China's allocated spectrum and is not accepted by NKRZI.MIIT SRRC Radio Type Approval — 无线电发射设备型号核准 YD/T 1214-2006 (2.4 GHz WLAN technical requirements) YD/T 1432-2017 (5 GHz WLAN technical requirements) GB 15629.11 / IEEE 802.11 aligned national standards MIIT spectrum management regulations (frequency allocation table)	Ukraine progressively adopts EU ETSI standards as DSTU EN (State Standards of Ukraine) through DSSU (State Standard of Ukraine body) and Ukrmetrteststandard, as part of its EU Association Agreement commitments. Radio frequency performance testing for 2.4 GHz Wi-Fi and Bluetooth equipment references DSTU EN 300 328; 5 GHz Wi-Fi references DSTU EN 301 893. NKRZI manages spectrum in alignment with EU radio frequency decisions. EU/ETSI-aligned EN test reports are accepted by NKRZI as the technical basis for the conformity declaration, significantly reducing re-testing burden for products already CE-tested. Products without prior EN testing must commission fresh DSTU EN-basis tests from an accredited laboratory.DSTU EN 300 328 V2.2.2 — Wideband transmission systems; 2.4 GHz ISM band (Wi-Fi, Bluetooth) DSTU EN 301 893 V2.1.1 — 5 GHz high-performance RLAN (Wi-Fi 5/6) DSTU EN 300 440 — Short range devices (SRD, IoT sub-GHz bands) DSTU EN 301 511 / DSTU EN 301 908-1 — GSM / LTE cellular DSSU (State Standard of Ukraine) — DSTU standards catalogue Ukraine-EU Association Agreement (in force 2017) — technical harmonisation with ETSI/EN	SRRC approval and GB/YD radio performance test data are not accepted by NKRZI in place of DSTU EN-based reports. If the product already holds CE marking with EN 300 328 / EN 301 893 test reports, NKRZI accepts these as technical evidence for the conformity declaration, substantially reducing re-testing costs. Without prior CE testing, new DSTU EN-basis radio performance tests must be commissioned from an accredited laboratory. The NKRZI conformity declaration remains a separate mandatory step even when EN test reports are reused.[INFORMATIONAL] RF performance testing to DSTU EN standards is mandatory as the technical basis for the NKRZI conformity declaration in Ukraine. SRRC approval and GB/YD test reports are not accepted. Existing EN 300 328 / EN 301 893 CE test reports are generally reusable as technical evidence for the NKRZI declaration, reducing costs; confirm report format and accreditation scope acceptance with NKRZI or a qualified local representative before submission.	DSSU — State Standard of Ukraine (Ukrmetrteststandard)2026-06-17 · reference
EMC — Conducted and Radiated Emissions (DSTU EN 301 489, DSSU)	China applies GB/T 9254.1-2021 for radiated and conducted emissions from information technology and telecom equipment, and GB 17625.1-2022 for harmonic current emissions. These are mandatory national standards distinct from and not interchangeable with the DSTU EN 301 489 series. GB EMC test reports are not accepted by NKRZI.GB/T 9254.1-2021 — Information technology equipment — Radio disturbance characteristics GB 17625.1-2022 — Electromagnetic compatibility — Harmonic current emissions (IEC 61000-3-2) GB/T 17618-2015 — Limits and methods of measurement of immunity characteristics (IEC 61000-4 series)	EMC requirements for conducted and radiated disturbance emissions from radio equipment and telecom terminal equipment in Ukraine are based on DSTU EN 301 489-1 (general EMC requirements for radio equipment) and product-specific DSTU EN 301 489-x companion standards, as adopted by DSSU. These standards mirror the EU EN 301 489 series. Compliance with DSTU EN 301 489 is required as part of the NKRZI conformity declaration application. EN 301 489-series test reports from CE certification are generally accepted by NKRZI as technical evidence.DSTU EN 301 489-1 V2.2.3 — EMC standard for radio equipment; Part 1: Common technical requirements DSTU EN 301 489-17 V3.2.4 — EMC specific conditions for wideband data and HIPERLAN equipment (Wi-Fi / BT) DSTU EN 301 489-3 — Short range devices (SRD) DSTU EN 301 489-52 — Cellular / LTE terminal equipment DSSU (State Standard of Ukraine) — DSTU standards catalogue	GB/T 9254 and GB 17625 test data are not accepted by NKRZI in place of DSTU EN 301 489 series reports. If the product already has CE-compliant EN 301 489-1 / EN 301 489-17 test reports, NKRZI generally accepts these as technical evidence for the conformity declaration. Without prior CE testing, new DSTU EN 301 489 tests must be commissioned from an accredited laboratory. The EN 301 489 series measures different disturbance limits and test methods compared with GB/T 9254, so results are not directly transferable.[INFORMATIONAL] DSTU EN 301 489-series EMC compliance is mandatory as technical evidence for the NKRZI conformity declaration in Ukraine. GB/T 9254 or GB 17625 test reports are not accepted. Existing EN 301 489 CE test reports can typically be reused as technical evidence for NKRZI applications, reducing costs; confirm format and scope acceptance with NKRZI or a qualified local representative before submission.	DSSU — State Standard of Ukraine (Ukrmetrteststandard)2026-06-17 · reference
Local Importer / Authorised Representative Obligation (Ukraine)	China does not require a domestic importer or in-country representative for exported products in the same legal sense. Chinese exporters deal directly with foreign customs authorities via their trading partners. There is no direct Chinese regulatory equivalent to Ukraine's mandatory local importer/authorised representative requirement for foreign manufacturers.No direct Chinese regulatory equivalent for this Ukraine-specific obligation	Foreign manufacturers placing radio equipment or telecom terminal equipment on the Ukrainian market must appoint a local Ukrainian importer or authorised representative registered in Ukraine. This representative is legally responsible for the NKRZI conformity declaration, UkrSEPRO UR mark affixing, product labelling in the Ukrainian language, customs clearance documentation, and post-market surveillance obligations. The ongoing conflict (Russia-Ukraine war) has significantly disrupted commercial banking, supply-chain logistics, and business continuity for many Ukrainian entities — identifying and retaining a qualified, operationally active Ukrainian importer/representative is a critical and independently assessed practical step. Standard cross-border payment channels may be restricted or delayed.Law of Ukraine on Electronic Communications No. 1089-IX (2020) — importer obligations Law of Ukraine on Conformity Assessment No. 2406-III (as amended) — authorised representative requirements UkrSEPRO national conformity assessment system — importer/representative role in UR mark application Ukrainian Customs Code — import documentation and clearance requirements Law of Ukraine on Consumer Protection — Ukrainian language labelling obligation	There is no Chinese regulatory equivalent to Ukraine's mandatory local importer/authorised representative requirement. Chinese exporters must identify and contract with a Ukraine-registered entity to fulfil NKRZI declaration, UR mark, Ukrainian language labelling, and customs obligations. Beyond regulatory compliance, practical feasibility must be assessed given the Russia-Ukraine war: banking channel restrictions, logistics disruption (port access, road transport), insurance availability, and the operational continuity of potential Ukrainian partners are all elevated risk factors requiring independent due diligence before committing to the market.[INFORMATIONAL] A locally registered Ukrainian importer or authorised representative is mandatory for foreign manufacturers placing radio or telecom equipment on the Ukrainian market. There is no Chinese regulatory equivalent. Beyond this legal obligation, practical market access in Ukraine is significantly impacted by ongoing conflict — banking, logistics, and partner operational continuity must be independently assessed with qualified in-country legal and commercial advisors before export commitment.	NKRZI — National Commission for the State Regulation of Electronic Communications, Radio Frequency Spectrum and Postal Services (Ukraine)2026-06-17 · reference
Radio / Telecom Terminal Equipment Conformity Declaration (NKRZI / UR mark)	China requires SRRC radio type approval (MIIT) for all intentional radio transmitters and a separate MIIT Network Access License (NAL / 进网许可证) for telecom terminal equipment connected to public networks. CCC (China Compulsory Certification) under CNCA applies to products in the mandatory CCC catalogue including some radio and electrical safety in-scope equipment. GB standards (GB 9254, GB 4943, YD/T series) form the technical basis.MIIT SRRC Radio Type Approval — 无线电发射设备型号核准 (MIIT Order No. 14, 2019) MIIT Network Access License (NAL) — 电信设备进网许可管理办法 (MIIT Order No. 2, 2017) CCC — China Compulsory Certification (CNCA) — GB 4943.1, GB/T 9254 scope GB/T 9254.1-2021 (Information technology equipment — radio disturbance characteristics) YD/T 1214-2006 (2.4 GHz WLAN technical requirements) YD/T 1432-2017 (5 GHz WLAN technical requirements)	All radio equipment and telecom terminal equipment placed on the Ukrainian market requires a mandatory NKRZI conformity declaration and must bear the UkrSEPRO UR conformity mark under the Law of Ukraine on Electronic Communications (No. 1089-IX, 2020) and associated NKRZI regulations. The National Commission for the State Regulation of Electronic Communications, Radio Frequency Spectrum and Postal Services (NKRZI) is the competent authority for spectrum and equipment conformity. CE Declaration of Conformity alone is NOT accepted as a substitute for the NKRZI UR declaration. However, due to Ukraine's EU Association Agreement (in force since 2017), EN/ETSI-based test reports are accepted by NKRZI as technical evidence, creating a pathway analogous to the EU RED process; a separate NKRZI declaration and UR mark are still mandatory. CCC is not recognised. Ongoing conflict (Russia-Ukraine war) creates significant disruption to customs processing, supply chains, logistics, and banking — practical market access must be assessed independently.Law of Ukraine on Electronic Communications No. 1089-IX (2020) Law of Ukraine on Conformity Assessment No. 2406-III (as amended) NKRZI Regulations on Conformity Assessment of Radio Equipment and Telecom Terminal Equipment UkrSEPRO national conformity assessment system — UR mark Ukraine-EU Association Agreement (in force 2017) — enables EN/ETSI test report acceptance DSTU EN 300 328, DSTU EN 301 893, DSTU EN 301 489 series (EU-aligned radio and EMC standards)	A new NKRZI conformity declaration and UkrSEPRO UR mark are required for Ukraine. SRRC approval and CCC marks are not recognised. EN/ETSI test reports generated for EU CE marking can be reused as technical evidence in the NKRZI declaration process (EU Association Agreement pathway), reducing duplicative radio and EMC testing, but cannot substitute the NKRZI declaration itself. The MIIT NAL scope does not map to NKRZI's framework. Beyond regulatory gaps, practical market-access risks are elevated due to ongoing conflict: customs delays, restricted banking channels, disrupted logistics, and variable enforcement capacity at Ukrainian border points should be assessed with in-country partners before committing to export.[INFORMATIONAL] A separate NKRZI conformity declaration and UkrSEPRO UR mark are mandatory for all radio and telecom terminal equipment placed on the Ukrainian market. CE DoC and CCC are not sufficient alone. EN/ETSI test data generated for EU/CE purposes may be reused as technical evidence under the EU Association Agreement pathway, but does not substitute the NKRZI declaration itself. Practical market access is significantly affected by ongoing conflict — verify current customs, logistics, and banking channels with qualified in-country partners before export.	NKRZI — National Commission for the State Regulation of Electronic Communications, Radio Frequency Spectrum and Postal Services (Ukraine)2026-06-17 · reference

INFORMATIONAL ONLY

Informational only / not a certification conclusion

AI-compiled, not human-verified. This comparison is generated and cross-checked by multiple AI models from public official sources; it has not been reviewed by a named human expert and may contain errors or out-of-date items. Confirm every requirement directly with the official regulator or standards body and a qualified professional before relying on it. Nothing here is legal, certification, customs, or market-access advice.

This page is an informational comparison aid, not a certification decision, NKRZI conformity declaration, legal opinion, customs determination, or market-access approval. Exporters, importers, and device manufacturers should verify current Ukrainian regulations, applicable DSTU standards, labelling requirements, and market-entry obligations with qualified regulatory professionals before importation or sale in Ukraine. Given the ongoing conflict in Ukraine, supply-chain, logistics, and banking conditions should be independently assessed.

E-E-A-T

Named editorial review

Pending named reviewer

Official regulator, standards body, notified body, customs, or primary legal source preferred. Local PDFs are not accepted.

Editorial controls

Rows must include publisher, official URL, access date, verification flag, and last_verified before human_reviewed can be true.

SOURCES

Official-source register.

CERT-UA — Government Computer Emergency Response Team of Ukraine (State Special Communications Service) · accessed 2026-06-17 · reference · used in 1 rows
DSSU — State Standard of Ukraine (Ukrmetrteststandard) · accessed 2026-06-17 · reference · used in 3 rows
NKRZI — National Commission for the State Regulation of Electronic Communications, Radio Frequency Spectrum and Postal Services (Ukraine) · accessed 2026-06-17 · reference · used in 2 rows