ETSI EN 304 633 V1.0.0 provides cybersecurity requirements for internet-connected toys that are covered by the Toy Safety Directive and include social interactive features, such as communication or camera functions, as well as location and tracking capabilities.

The standard covers, among other things, vulnerability handling, technical cybersecurity requirements and assessment methods. It is intended to support the application of cybersecurity requirements under the EU Cyber Resilience Act (CRA).

You can find the document here: ETSI EN 304 633 V1.0.0

All feedback and comments are welcome by 11 November 2026.