The UK Department for Transport (DfT) has launched a consultation on proposed cybersecurity requirements for public electric vehicle (EV) charging points, potentially paving the way for a common minimum security standard for chargers sold or installed across the country.
The proposals aim to address vulnerabilities in public charging infrastructure as the number of connected charge points increases. The department has identified several potential threats, including direct attacks on charging equipment and the manipulation or misuse of charge points to compromise other parts of a charging network.
According to the DfT, such incidents could interrupt charging services and create wider consequences for drivers, businesses and critical national infrastructure.
Proposed Cybersecurity Standards for Public Chargers
The DfT is considering making compliance with the ETSI EN 303 645 cybersecurity standard mandatory for public charge points. The standard establishes baseline security requirements for connected devices, including user authentication, secure software updates and vulnerability management.
The department is also considering recognising the European EN 18031 standard as an equivalent compliance route. This approach could help manufacturers avoid having to satisfy separate technical requirements for the UK and European Union markets.
The proposed framework would extend beyond software protections to cover the physical security of charging equipment.
Public charge points could be required to include anti-tampering measures such as protective seals, sensors capable of detecting unauthorised access and notification systems that alert operators when someone attempts to access internal components.
Electricity Metering and Consumer Protection
The consultation also proposes requirements for electricity meters installed in public charging equipment.
Under the plans, all public chargers would need to incorporate meters compliant with the Measuring Instruments Regulations 2016 and meet at least Class B accuracy requirements. This would require electricity measurements to be accurate within 2%.
The measure is intended to reduce opportunities for meter tampering and protect both consumers and charge point operators from fraudulent activity.
Accurate metering is particularly important for public charging services, where drivers are billed according to the electricity supplied. The proposed requirements would establish additional safeguards around the measurement and reporting of energy consumption.
New Chargers Would Face the Requirements
The DfT said there are currently no specific cybersecurity requirements covering public charge points. Domestic and small non-domestic chargers are already subject to security provisions under the Electric Vehicles (Smart Charge Points) Regulations 2021.
If adopted, the new requirements would apply to public chargers newly sold or installed in the UK. Existing equipment would not be required to undergo retrofitting, although replacement units would need to meet the proposed standards.
This approach would allow operators to retain existing charging equipment while ensuring that new installations and replacement hardware meet the updated security requirements.
Consultation Open Until December 20
The consultation will remain open until December 20, 2026. The DfT is inviting responses from stakeholders, including charge point manufacturers, infrastructure operators, service providers and other interested parties.
Responses can be submitted through an online form, by email or by post.
The department is also considering a second phase of regulatory measures that could introduce additional cybersecurity obligations for charge point operators and e-mobility service providers.
The consultation forms part of a broader effort to strengthen the resilience of the UK’s public EV charging infrastructure as the country’s transition to electric mobility increases reliance on connected charging networks.