(1)

To cover the needs identified in the relevant detailed topics, the Commission should specify the number and title of the variables for the data sets covering several detailed topics listed in Annex I to Regulation (EU) 2019/1700, namely: characteristics of the workplace, employment status, educational attainment-details, including education interrupted or abandoned, housing conditions details, including deprivation and imputed rent, living environment, intergenerational transmission of advantages and disadvantages, housing difficulties (including renting difficulties) and reasons.

(2)

Income and living conditions domain provides information required by the European Semester and the European Pillar of Social Rights, in particular on income distribution, poverty and social exclusion. It also provides information for various other EU policies related to living conditions and poverty.

(3)

The Commission should establish the number and title of the variables on the ad hoc subject Households energy efficiency.

(4)

The number of variables to be collected does not exceed by more than 5 % the number of variables collected for the income and living conditions domain at the time when Regulation (EU) 2019/1700 entered into force.

(1)

Protection of the network or its functioning from harm, protection of personal data and privacy of the user and of the subscriber and protection from fraud are elements that support protection against cybersecurity risks.

(2)

As stated in recital 13 of Directive 2014/53/EU, the protection of personal data and privacy of users and of subscribers of radio equipment and the protection from fraud may be enhanced by particular features of radio equipment. According to that recital, radio equipment should therefore in appropriate cases be designed in such a way that it supports those features.

(3)

5G will play a key role in the development of the Union digital economy and society in the years to come and will potentially affect almost every aspect of Union citizens’ lives. The document with title ‘Cybersecurity of 5G networks EU Toolbox of risk mitigating measures’ (2) identifies a possible common set of measures which are able to mitigate the main cybersecurity risks of 5G networks and provides guidance for the selection of measures which should be prioritised in mitigation plans at national and at Union level. In addition to those measures, it is very important to follow a harmonised approach to essential requirements relating to elements of cybersecurity protection applicable to 5G radio equipment when it is placed on the Union market.

(4)

The level of security applicable under Union essential requirements set out in Article 3(3)(d), (e) and (f) to ensure network protection, safeguards for the protection of personal data and privacy and protection from fraud shall not undermine the high level of security requested at national level for decentralised smart grids in the field of energy where smart meters subject to those requirements are to be used, and for 5G network equipment used by providers of public electronic communications networks and publicly available electronic communications services within the meaning of in Directive (EU) 2018/1972 of the European Parliament and of the Council (3).

(5)

Numerous concerns have also been expressed in relation to increasing cybersecurity risks as a result of the increased use by professionals and consumers, including children, of radio equipment which: (i) is capable itself to communicate over the internet, regardless if it communicates directly or via any other equipment (‘internet-connected radio equipment’), i.e., such internet-connected equipment operates protocols necessary to exchange data with the internet either directly or by means of an intermediate equipment; (ii) can be either a toy with radio function which also falls within the scope of Directive 2009/48/EC of the European Parliament and of the Council (4) or is designed or intended exclusively for childcare, such as child monitors; or (iii) is designed or intended, whether exclusively or not exclusively, to be worn on, strapped to, or hung from any part of the human body (including the head, neck, trunk, arms, hands, legs and feet) or any clothing (including headwear, hand wear and footwear) worn by human beings such as radio equipment in the form of wrist watch, ring, wristband, headset, earphone or glasses (‘wearable radio equipment’).

(6)

In this respect, any radio equipment for childcare, radio equipment covered by Directive 2009/48/EC or wearable radio equipment, which is capable itself to communicate over the internet, regardless if it communicates directly or via any other equipment, should be deemed to be internet-connected radio equipment. Implants, for example, should not be considered as wearable radio equipment as they are not worn on, strapped to, or hung from any part of the human body or any clothing. However, implants should be deemed to be internet-connected radio equipment, if they are capable themselves to communicate over the internet, regardless if they communicate directly or via any other equipment.

(7)

Given the concerns raised due to the fact that radio equipment does not ensure protection against elements of cybersecurity risks, it is necessary to render applicable, for radio equipment within certain categories or classes, the essential requirements of Directive 2014/53/EU associated with the protection from harm to the network, protection of personal data and privacy of users and of subscribers and protection from fraud.

(8)

Directive 2014/53/EU applies to products that meet the definition of ‘radio equipment’ in Article 2 of that Directive, subject to specific exclusions specified in Article 1(2) and Article 1(3) of that Directive. Whilst the definition of radio equipment in Article 2 of Directive 2014/53/EU refers to equipment that can communicate with radio waves, no requirements of Directive 2014/53/EU make a distinction between the radio and non-radio functions of the radio equipment and therefore all aspects and parts of the equipment should comply with the essential requirements provided for in this delegated regulation.

(9)

As regards harm to the network or its functioning or misuse of network resources, unacceptable degradation of services can be caused by internet-connected radio equipment which do not ensure that networks are not harmed or are not misused. For example, an attacker may maliciously flood the internet network to prevent legitimate network traffic, disrupt the connections between two radio products, thus preventing access to a service, prevent a particular person from accessing a service, disrupt a service to a specific system or person or disrupt information. The degradation of online services can thus result in malicious cyber-attacks, which will lead to increased costs, inconveniences or risks for operators, service providers or users. Article 3(3), point (d), of Directive 2014/53/EU, which requires that radio equipment does not harm the network or its functioning nor misuse network resources, thereby causing an unacceptable degradation of service, should therefore apply to internet-connected radio equipment.

(10)

Concerns have also been raised as regards the protection of personal data and privacy of the user and of the subscriber of internet-connected radio equipment due to the ability of that radio equipment to record, store and share information, interact with the user, including children, when speakers, microphones and other sensors are integrated in that radio equipment. Those concerns relate, in particular to the ability of that radio equipment to record photos, videos, localisation data, data linked to the play experience as well as heartrate, sleeping habits or other personal data. For instance, advanced settings of the radio equipment can be accessed through a default password if the connection or the data are not encrypted or if a strong authentication mechanism is not in place.

(11)

It is thus important that internet-connected radio equipment, which is placed on the Union market, incorporate safeguards to ensure that personal data and privacy are protected when they are capable of processing personal data as defined in Article 4(1) of Regulation (EU) 2016/679 of the European Parliament and of the Council (5) or data defined in Article 2, points (b) and (c), of Directive 2002/58/EC of the European Parliament and of the Council (6). Article 3(3), point (e), of Directive 2014/53/EU should therefore apply to internet-connected radio equipment.

(12)

Additionally, as regards the protection of personal data and privacy, radio equipment for childcare, radio equipment covered by Directive 2009/48/EC and wearable radio equipment pose security risks even in the absence of an internet connection. Personal data can be intercepted when that radio equipment emit or receive radio waves and lack safeguards that ensure personal data and privacy protection. The radio equipment for childcare, the radio equipment covered by Directive 2009/48/EC and the wearable radio equipment can monitor and register a number of the user’s sensitive (personal) data over time and retransmit them through communication technologies that might be insecure. The radio equipment for childcare, the radio equipment covered by Directive 2009/48/EC and the wearable radio equipment should also ensure protection of personal data and privacy, when they are capable of processing, within the meaning of Article 4(2) of Regulation (EU) 2016/679, of personal data, as defined in Article 4(1) of Regulation (EU) 2016/679, or traffic data and location data, as defined in Article 2, points (b) and (c), of Directive 2002/58/EC. Article 3(3), point (e), of Directive 2014/53/EU should therefore apply to that radio equipment.

(13)

As regards fraud, information including personal data can be stolen from internet-connected radio equipment, which do not ensure protection from fraud. Specific kinds of frauds concern internet-connected radio equipment when they are used to perform payments over the internet. The costs can be high and do not only concern the person who suffered the fraud, but also society as a whole (for example, the cost of police investigation, the costs of victim services, the costs of trials to establish responsibilities). It is therefore necessary to ensure trustworthy transactions and minimise the risk of incurring financial loss of the users of internet-connected radio equipment executing the payment via that radio equipment and of the recipient of the payment carried out via that radio equipment.

(14)

Internet-connected radio equipment placed on the Union market should support features for ensuring protection from fraud when they enable the holder or user to transfer money, monetary value or virtual currency as defined in Article 2, point (d), of Directive (EU) 2019/713 of the European Parliament and of the Council (7). Article 3(3), point (f), of Directive 2014/53/EU should therefore apply to that radio equipment.

(15)

Regulation (EU) 2017/745 of the European Parliament and of the Council (8) lays down rules on medical devices and Regulation (EU) 2017/746 of the European Parliament and of the Council (9) lays down rules on in vitro diagnostic medical devices. Both Regulations (EU) 2017/745 and (EU) 2017/746 address certain elements of cybersecurity risks associated with the risks addressed by Article 3(3), points (d), (e) and (f), of Directive 2014/53/EU. Radio equipment to which either of those Regulations apply should therefore not fall within the categories or classes of radio equipment which should comply with the essential requirements set out in Article 3(3), points (d), (e) and (f), of Directive 2014/53/EU.

(16)

Regulation (EU) 2019/2144 of the European Parliament and of the Council (10) establishes requirements for the type-approval of vehicles, and of their systems and components. In addition, the principal objective of Regulation (EU) 2018/1139 of the European Parliament and of the Council (11) is to establish and maintain a high uniform level of civil aviation safety in the Union. Moreover, Directive (EU) 2019/520 of the European Parliament and of the Council (12) lays down the conditions for the interoperability of electronic road toll systems and for facilitating cross-border exchange of information on the failure to pay road fees in the Union. Regulations (EU) 2019/2144 and (EU) 2018/1139 and Directive (EU) 2019/520 address elements of cybersecurity risks associated with the risks set out in Article 3(3), points (e) and (f), of Directive 2014/53/EU. Radio equipment to which Regulations (EU) 2019/2144 and (EU) 2018/1139 or Directive (EU) 2019/520 apply should therefore not fall within the categories or classes of radio equipment which should comply with the essential requirements set out in Article 3(3), points (e) and (f), of Directive 2014/53/EU.

(17)

Article 3 of Directive 2014/53/EU provides for essential requirements with which economic operators shall comply. In order to facilitate conformity assessment with those requirements, it provides for a presumption of conformity for radio equipment that complies with voluntary harmonised standards that are adopted in accordance with Regulation (EU) No 1025/2012 of the European Parliament and of the Council (13) for the purpose of expressing detailed technical specifications of those requirements. The specifications will consider and address the level of risks that correspond to the intended use of each category or class of radio equipment concerned by this Regulation.

(18)

Economic operators should be provided with a sufficient time to adapt to the requirements of this Regulation. The application of this Regulation should therefore be deferred. This Regulation is not to prevent economic operators from complying with it from the date of its entry into force.

(19)

The Commission has carried out appropriate consultations during the preparatory work of the measures set out in this Regulation and has consulted the Expert Group on Radio Equipment,

(1)

Council Regulation (EU) 2021/92 (2) lays down quotas for 2021.

(2)

According to the information received by the Commission, catches of the stock of anchovy in area 8 by vessels flying the flag of or registered in Spain have exhausted the quota allocated for 2021.

(3)

It is therefore necessary to prohibit certain fishing activities for that stock,

(1)

Council Regulation (EU) 2021/92 (2) lays down quotas for 2021.

(2)

According to the information received by the Commission, catches of the stock of herring in Union and Norwegian waters of 4 north of 53°30' N by vessels flying the flag of or registered in Lithuania have exhausted the quota allocated for 2021.

(3)

It is therefore necessary to prohibit certain fishing activities for that stock.

(1)

African swine fever is an infectious viral disease affecting kept and wild porcine animals and can have a severe impact on the concerned animal population and the profitability of farming causing disturbance to movements of consignments of those animals and products thereof within the Union and exports to third countries.

(2)

In the event of an outbreak of African swine fever in kept porcine animals, there is a serious risk of the spread of that disease to other establishments of kept porcine animals.

(3)

Commission Delegated Regulation (EU) 2020/687 (2) supplements the rules for the control of the listed diseases referred to in Article 9(1), points (a), (b) and (c) of Regulation (EU) 2016/429, and defined as category A, B and C diseases in Commission Implementing Regulation (EU) 2018/1882 (3). In particular, Articles 21 and 22 of Delegated Regulation (EU) 2020/687 provide for the establishment of a restricted zone in the event of an outbreak of a category A disease, including African swine fever, and for certain measures to be applied therein. In addition, Article 21(1) of that Delegated Regulation provides that the restricted zone is to comprise a protection zone, a surveillance zone, and, if necessary, further restricted zones around or adjacent to the protection and surveillance zones.

(4)

Following an outbreak of African swine fever in kept porcine animals in the state of Mecklenburg-Western Pomerania, Germany, which was confirmed on 15 November 2021, and the information received from that federal Member State of the disease situation on its territory, Commission Implementing Decision (EU) 2021/2021 (4) was adopted. That Implementing Decision provides that Germany is to ensure that the restricted zone, where the measures for protection and surveillance zones provided for in Delegated Regulation (EU) 2020/687 apply, comprises at least the areas listed in the Annex to that Implementing Decision. That Implementing Decision applies until 15 February 2022.

(5)

At the end of December 2021, Germany informed the Commission of the current favourable African swine fever situation in kept porcine animals in the restricted zone in the state of Mecklenburg-Western Pomerania and that the measures for protection and surveillance zones have been duly implemented in accordance with Delegated Regulation (EU) 2020/687, in order to prevent the further spread of that disease.

(6)

Taking account of the current favourable African swine fever situation in kept porcine animals in the state of Mecklenburg-Western Pomerania and the measures duly implemented by Germany, and in order to prevent any unnecessary disturbance to trade, it is appropriate to repeal Implementing Decision (EU) 2021/2021 with effect from 15 January 2022.

(7)

The measures provided for in this Decision are in accordance with the opinion of the Standing Committee on Plants, Animals, Food and Feed,