Britain proposes cyber security rules for public EV chargers

Public EV chargers sold or installed in Great Britain would have to meet a common cyber security baseline under proposals published by the Department for Transport on 29 October. The consultation is open until 11:59pm on 20 December 2026.

The government’s preferred approach would require compliance with ETSI EN 303 645, covering areas including authentication, secure software updates and fixing vulnerabilities. It is also considering an alternative compliance route through EN 18031, with the aim of aligning requirements across markets.

The proposals extend beyond software. New chargers would need physical protection against tampering and electricity meters that comply with the Measuring Instruments Regulations. The department is asking industry how these requirements should be introduced and how compliance should be demonstrated.

Existing chargers would not face a compulsory retrofit under the proposed approach. Replacement units, however, would have to meet the requirements once the rules took effect. The consultation concerns England, Scotland and Wales; it does not extend to Northern Ireland.

These remain proposals, so the announcement introduces no immediate change to how drivers pay for or use a charger. Manufacturers and operators can submit evidence before the December deadline, ahead of a final decision on the requirements and implementation timetable.

Sources

• Department for Transport: proposals and consultation response
• electrive: public-charger cyber security consultation
• Photograph: public charging points in Swanscombe