UK consults on mandatory cybersecurity rules for new public chargers

The UK Department for Transport opened a consultation on October 29, 2026 on cybersecurity rules for public charge points. Today there are no specific cybersecurity requirements for public chargers in the UK. Home and small non-domestic chargers are already covered by the Electric Vehicles (Smart Charge Points) Regulations 2021.

The proposals for public charge points:

• compliance with the cybersecurity standard ETSI EN 303 645, with EN 18031 under consideration as an alternative route;
• physical anti-tamper protection built into the charger;
• a meter of at least Class B accuracy under the Measuring Instruments Regulations.

The rules would apply to public charge points sold and installed after they take effect. The department will not require a retrofit, but a charger that reaches end of life has to be replaced with a compliant one. A possible second phase would put further requirements on charge point operators and e-mobility service providers, who would be expected to follow a cybersecurity best-practice framework. Responses close at 11:59pm on December 20, 2026.

The first phase is about the hardware, so it lands on charger makers and on charge point operators buying new units for UK sites. The second phase would reach the software side that runs those chargers. Plugchoice will follow the outcome and report what changes for operators.

Sources

• Cyber security for public electric vehicle charge points, Department for Transport, October 29, 2026.
• UK reviews cybersecurity requirements for public EV chargers, electrive, November 2, 2026.