RED’s Cybersecurity Shift: What’s Actually Changing
In 2022, a new set of rules (delegated act 2022/30) brought cybersecurity front and center.

As of August 2025, manufacturers selling devices in the EU need to:


Block the installation of unauthorized software
Use Secure Boot (or similar) to verify firmware authenticity
Ensure only signed and approved ROMs can run
The directive doesn’t name “bootloaders” specifically, but its demand for software authenticity basically makes bootloader unlocking—at least in its current form—a thing of the past

Samsung’s Early Move: A Sign for the Whole Market
Samsung’s decision to disable bootloader unlocking in OneUI 8 wasn’t random. It was a strategic move, anticipating RED’s enforcement. Other manufacturers—Xiaomi, Google, and beyond—will need to follow to keep their devices certified for sale in Europe.

The pressure is on to:


Maintain CE certification
Guarantee firmware can’t be tampered with
Realign policies to meet RED’s cybersecurity demands
Failing to comply isn’t an option for any brand that wants to keep a foothold in the EU market.
.