CE Marking 101 — the complete EU guide for hardware manufacturers

The CE mark is the manufacturer's declaration that a product meets all the EU directives and regulations that apply to it. It is the legal passport that lets a product be placed on the European single market. Without it, products covered by the New Legislative Framework cannot be lawfully sold in the EU and EEA.

This guide covers the full CE marking process in 2026 — what the mark is, which products need it, the 24 directives and regulations behind it, the six-step process to obtain it, the conformity assessment modules, when a Notified Body becomes involved, the Declaration of Conformity and Technical File, post-market obligations, common mistakes, and the penalties for non-compliance.

What CE marking is

The letters CE stand for Conformité Européenne. The mark was introduced by Council Directive 93/68/EEC as a uniform way for manufacturers to declare that a product meets the essential requirements of all the EU directives applicable to it.

Crucially, CE is not a quality mark, not a safety certification, and not issued by any authority. It is the manufacturer's own declaration — placed on the manufacturer's sole responsibility — that the product complies with EU law. The market surveillance system, not a certifying body, is what enforces the declaration's truth.

The modern framework is the New Legislative Framework (NLF), introduced in 2008 through Decision 768/2008/EC and Regulation 765/2008. Every directive and regulation that uses CE marking after 2008 follows the NLF's standardised modules and obligations — which is why most modern directives have very similar conformity assessment structures.

Which products need CE marking

CE marking is mandatory for any product within the scope of one or more of the 24 New Legislative Framework directives and regulations in force in 2026:

A single product is almost always subject to two or more of these simultaneously. A connected industrial sensor with mains power, Wi-Fi, software updates, and software-driven analytics in 2027 triggers LVD + EMC + RED + RoHS + CRA at once. One CE mark; one Declaration of Conformity citing all five.

What does NOT need CE marking

Some product categories are regulated under separate frameworks and do not carry the CE mark:

• Food and feed — regulated under Regulation 178/2002
• Cosmetics — regulated under Regulation 1223/2009
• Pharmaceuticals — regulated under Directive 2001/83/EC
• Chemicals — regulated under REACH 1907/2006
• Motor vehicles — regulated under the Type Approval framework Regulation 2018/858
• Aviation products — regulated by EASA under Regulation 2018/1139

Consumer products outside any sector regulation fall under the General Product Safety Regulation 2023/988 — which does not require CE marking but does impose safety and post-market obligations.

The six-step CE marking process

The process is fundamentally the same across every NLF directive.

1. Identify all applicable directives and regulations

List every NLF directive and regulation that applies based on the product's function, technology, intended use, and the markets you sell into. Cenitia's auto-mapper walks this for you; manually, the Blue Guide on EU product rules is the canonical reference.

2. Identify the applicable harmonised standards

For each cited directive, find the harmonised standards listed in the Official Journal that give presumption of conformity with the essential requirements. The European Commission's harmonised standards database lists them per directive. Standards are not mandatory — they are a safe harbour. A manufacturer that applies a listed harmonised standard correctly is presumed to satisfy the corresponding essential requirements; deviation requires the manufacturer to demonstrate equivalent conformity another way.

3. Perform the conformity assessment

Each directive specifies which conformity assessment modules are permitted (A through H — see the dedicated cluster article for the full breakdown). Lower-risk products typically use Module A (full internal quality control, self-assessment by the manufacturer). Higher-risk products require a Notified Body to perform Modules B/C/D/E/F/G/H — see When you need a Notified Body.

Pre-compliance testing typically happens at this step — EMC chambers, radio tests, safety tests under EN 62368-1, cybersecurity tests under EN 18031.

4. Compile the Technical File

The Technical File is the evidence bundle that supports the Declaration of Conformity. See Technical File 101 for the full structure. At minimum it contains:

• General product description and intended use
• Design and manufacturing drawings, schematics, BOM
• Risk assessment
• List of harmonised standards applied with version dates
• Pre-compliance test reports
• For products with software: software architecture, SBOM, secure update mechanism description
• Post-market surveillance plan

The Technical File is retained for ten years from the date the last unit is placed on the market.

5. Draw up the Declaration of Conformity

One Declaration of Conformity (DoC) citing every applicable directive and regulation. See Declaration of Conformity 101 for the nine required elements. The DoC is signed by the manufacturer (or by the EU Authorised Representative for non-EU manufacturers) under sole responsibility.

6. Affix the CE mark and place the product on the market

The CE mark, in the official typographic form (Annex II of Regulation 765/2008), goes on the product itself — or on packaging and accompanying documents if the product surface does not permit. Minimum height 5 mm unless the directive permits scaling. The mark must be visible, legible, and indelible. Where conformity assessment involved a Notified Body, the NB's four-digit identification number appears next to the CE mark.

No other marking that could mislead about the meaning of the CE mark may appear on the product (Article 30 of Regulation 765/2008).

Conformity assessment modules at a glance

The NLF defines eight conformity assessment modules. Each directive specifies which are permitted for products under its scope.

Decision 768/2008/EC Annex II contains the authoritative text. See the Modules A through H cluster for the full breakdown including when supplements (B+C, B+D, etc.) apply.

Notified Bodies — when third-party assessment is required

A Notified Body (NB) is a conformity assessment body designated by an EU member state and notified to the European Commission via the NANDO database. NBs perform the assessment tasks that Modules B/C/D/E/F/G/H require.

Notified Body involvement is required for:

• Most radio equipment under RED Annex IV when harmonised standards are not fully applied
• Medical devices Class IIa and above under MDR
• Pressure equipment above certain categories under PED
• Lifts under the Lifts Directive
• Personal protective equipment Category III under PPE Regulation
• Toys when harmonised standards are not fully applied
• ATEX equipment for explosive atmospheres above Category 3
• Important products Class I and II under CRA Annex III (from Dec 2027)
• Critical products under CRA Annex IV (always)

For low-risk products — most consumer electronics under LVD/EMC, most RoHS, most non-radio CRA products — Notified Body involvement is not required and the manufacturer self-assesses under Module A. See When you need a Notified Body for the full decision guide.

Declaration of Conformity, Technical File, and the relationship between them

These two documents together carry the CE-marked product's compliance.

• The Declaration of Conformity is the one-page legal statement signed by the manufacturer, citing every applicable directive, every harmonised standard applied, and where required, the Notified Body that performed the assessment. It ships with the product or accompanies it on first delivery. See Declaration of Conformity 101.
• The Technical File is the evidence bundle behind the DoC — schematics, BOM, test reports, risk analysis, SBOM, software architecture, traceability records, post-market surveillance records. Customers don't see it; market surveillance authorities and Notified Bodies inspect it on request. See Technical File 101.

A signed DoC without a complete Technical File behind it is a signature on a claim the manufacturer cannot defend. That is the failure mode that leads to product withdrawals and personal liability.

Post-market obligations

CE marking is not a one-and-done event. After placing the product on the market, the manufacturer has continuing obligations under the directive(s) cited:

• Maintain the Technical File and DoC for ten years (longer for medical devices)
• Operate post-market surveillance — collect field data on safety incidents, near-misses, complaints
• Take corrective action when a non-conformity is identified — withdrawal, recall, design change
• Report serious incidents to market surveillance authorities (RAPEX for general consumer products, EUDAMED for medical devices, ENISA for CRA cybersecurity incidents from September 2026)
• Re-assess when the regulation amends — when a cited directive is amended or a harmonised standard is replaced, the manufacturer must verify that the product still conforms and reissue the DoC if needed

This last obligation is the one most manufacturers underestimate. Cenitia watches every cited regulation upstream and flags affected DoCs the moment a change is published in the Official Journal.

Market surveillance and penalties

Market surveillance across the EU is harmonised under Regulation 2019/1020. Each member state designates one or more authorities (in Slovakia: the Slovak Trade Inspection; in Germany: BAuA + state authorities; in France: DGCCRF). Authorities have powers to:

• Inspect manufacturers' Technical Files and DoCs
• Take product samples from the market and test them
• Order withdrawal from the market (product must be removed from sale)
• Order recall (units already with end users must be retrieved)
• Order import bans (customs blocks future shipments)
• Impose administrative fines — set by each member state

Examples of national fine ceilings:

• Germany (ProdSG): up to €100 000 per offence; criminal liability for knowing violations
• Slovakia (Act 56/2018): up to €300 000
• France (Code de la consommation): up to €1.5 million for legal entities for serious violations
• EU-level CRA fines (from December 2027): up to €15 million or 2.5% of global annual turnover for breaches of Annex I essential requirements (CRA Article 64)

Importantly, the signer of the Declaration of Conformity is personally named in any investigation. The legal personality is the manufacturer's company, but the signing officer's signature is on the file.

Common CE marking mistakes

The most frequent compliance failures we see in Inovasense work and the Cenitia review pipeline:

• Citing a repealed directive. The Low Voltage Directive is 2014/35/EU, not the long-superseded 2006/95/EC. Always verify the current version on EUR-Lex.
• Missing a cited directive entirely. A connected mains-powered radio product needs LVD + EMC + RED + RoHS + (from Dec 2027) CRA — five directives. Citing only RED is non-conformity.
• Outdated harmonised standard version. When a new harmonised standard version is cited in the Official Journal, the previous version is withdrawn after a transition period. Citing a withdrawn version means no presumption of conformity.
• Missing Notified Body number. When a Notified Body was involved, its four-digit number must appear next to the CE mark on the product. Missing it is grounds for product withdrawal.
• CE mark too small. Minimum 5 mm height unless the directive permits scaling. Particularly common on small IoT products.
• No DoC translation for the market of sale. Selling in Germany requires the DoC in German on first delivery; English-only is not enough even though it is permitted as the original drafting language.
• No EC REP for non-EU manufacturers. A common Asian-OEM mistake — the manufacturer signs the DoC under its own name with no EU-resident representative. The product is then refused at customs.

See Top 10 CE marking mistakes that trigger product withdrawal for the full list with case examples.

How Cenitia changes the workflow

Cenitia's auto-mapper takes your product description, BOM, software architecture, and intended markets, and produces:

• A list of every applicable NLF directive and regulation, with confidence scores per match
• For each directive, the harmonised standards currently listed in the Official Journal
• A draft Declaration of Conformity citing the correct directive references and standard versions
• A pre-filled Technical File outline ready to populate
• Continuous monitoring of every cited regulation — when one amends in the Official Journal, your DoC is flagged automatically

For products that need Notified Body assessment, custom interpretation of edge cases, or full lifecycle compliance management, our parent company Inovasense provides expert-led consulting. The two complement, not compete.

Frequently asked questions

What is CE marking?

CE marking is the manufacturer's declaration that a product meets all the EU directives and regulations applicable to it, enabling the product to be placed on the European single market. The 'CE' stands for Conformité Européenne. The mark is mandatory for products falling within the scope of EU New Legislative Framework directives and regulations.

Which products need CE marking?

Any product within the scope of an EU directive or regulation that mandates CE marking — including electronics, machinery, medical devices, toys, lifts, pressure equipment, personal protective equipment, radio equipment, and from December 2027 every product with digital elements under the Cyber Resilience Act. Foods, cosmetics, pharmaceuticals, and chemicals fall under separate frameworks and do not carry the CE mark.

Can I CE-mark a product myself or do I need a third party?

Most products use the Module A self-assessment route, where the manufacturer performs the conformity assessment internally and signs the Declaration of Conformity on its own authority. Higher-risk products (most radio equipment under RED Annex IV, certain machinery, medical Class IIa and above, lifts, pressure equipment) require Notified Body involvement under Modules B/C/D/E/F/G/H.

What is the difference between a directive and a regulation in CE marking?

A directive is binding on member states as to the result but each state transposes it into national law (e.g. Radio Equipment Directive 2014/53/EU). A regulation is directly applicable EU-wide without transposition (e.g. Cyber Resilience Act (EU) 2024/2847). Both can mandate CE marking. The EU has been progressively replacing older directives with regulations under the New Legislative Framework for clarity and uniform application.

How long does CE marking take?

Self-assessed products (Module A) typically take 4–12 weeks once design is frozen, depending on testing throughput and Technical File completeness. Products requiring Notified Body involvement take 3–9 months. Complex medical devices (Class III), critical cybersecurity products under CRA Annex IV, and certain machinery can take 12 months or longer.

How much does CE marking cost?

For a self-assessed Module A product, the dominant cost is lab pre-compliance testing — typically €3 000 to €8 000 for EMC + radio + safety on a small connected product, plus internal engineering and documentation effort. Products requiring Notified Body involvement add €10 000 to €40 000 for the NB assessment depending on directive and complexity. Full-service CE consulting engagements range €5 000 to €25 000 per product for a startup-scale product.

What happens if I sell a non-CE-marked product in the EU?

Under EU Market Surveillance Regulation 2019/1020 Article 16, market surveillance authorities can order withdrawal from the market, recall, and import bans. Administrative fines are set by each member state; for example in Germany under ProdSG up to €100 000 per case, in Slovakia under Act 56/2018 up to €300 000. Repeated or knowing violations can carry criminal liability.

Is CE marking the same as the UKCA mark or US FCC certification?

No. CE marking is for the European Union and EEA (plus Switzerland and Turkey via mutual recognition). The United Kingdom Conformity Assessed (UKCA) mark applies in Great Britain post-Brexit, although CE is still accepted indefinitely under current UK policy. United States FCC certification (for radio equipment) and UL listing (for safety) are separate frameworks with different test methods, paperwork, and labelling. A globally sold product typically carries CE + UKCA + FCC + UL marks in parallel.

Where on the product does the CE mark go?

Affixed to the product itself, or where the nature of the product does not permit, to the packaging and accompanying documents. Minimum height 5 mm (unless the directive permits scaling). Must be visible, legible, and indelible. Where the conformity assessment involved a Notified Body, the NB's four-digit identification number appears beside the CE mark. No other marking that could mislead about the meaning of the CE mark may appear on the product.

How long do I need to keep CE marking documentation?

Ten years from the date the last unit of the product was placed on the EU market, for the Technical File and the Declaration of Conformity. The Medical Device Regulation extends this to 10–15 years depending on device class. Market surveillance authorities can request the documentation at any point during this period and the manufacturer must provide it within the language and timeframe specified by the authority.

Related from the Library

• Declaration of Conformity 101 — the legal artefact your CE marking culminates in
• CRA Annex I explained — the cybersecurity requirements every product with digital elements must meet from December 2027

Further reading

Primary EU sources:

• Blue Guide on the implementation of EU product rules — the canonical CE marking reference
• Decision 768/2008/EC — New Legislative Framework modules
• Regulation 765/2008 — accreditation and market surveillance
• Regulation 2019/1020 — market surveillance

Official tools and databases:

• European Commission CE marking overview
• Harmonised standards database by directive
• NANDO — Notified Body database
• Your Europe — Business compliance overview

Last reviewed: 15 June 2026. Cited regulations watched continuously by Cenitia — when one amends, this article is flagged for update.