The UK Department for Transport has initiated a consultation regarding new cybersecurity mandates for public electric vehicle charging stations. The proposal aims to establish a unified minimum security standard for all units sold or installed within Britain to mitigate risks of network manipulation and service disruption.
Proposed regulations require compliance with the ETSI EN 303 645 standard, covering authentication, secure software updates, and vulnerability management. The government is also evaluating the acceptance of the European EN 18031 standard to ensure compatibility for manufacturers operating across both UK and EU markets.
Beyond software, the requirements include physical anti-tampering measures such as protective seals and sensors for detecting unauthorized access. Furthermore, all public chargers must feature electricity meters meeting the Measuring Instruments Regulations 2016 with Class B accuracy, ensuring measurements remain within a two per cent margin.
Currently, no specific cybersecurity rules exist for public charging points, though domestic units are governed by the 2021 Smart Charge Points Regulations. The new rules would apply to future sales and installations, while existing equipment would only need to comply upon replacement.
The consultation period remains open until 20 December 2026. The Department for Transport is also exploring a potential second phase of regulation that would extend cybersecurity requirements to include charge point operators and e-mobility service providers.
