Page type: primary-anchored (mirrors Electric Vehicles (Smart Charge Points) Regulations 2021)
Electric Vehicles (Smart Charge Points) Regulations 2021
Source: si-2021-1467-ev-smart-charge-points.md Last updated: 2026-04-05
What this instrument does
The Electric Vehicles (Smart Charge Points) Regulations 2021 (SI 2021/1467) mandate smart functionality, demand-side response capability, cybersecurity, and off-peak charging defaults for all domestic and workplace EV charge points sold in England, Wales and Scotland from 30 June 2022.
Point-of-sale enforcement model
The regulations bind sellers. Reg.4 prohibits the sale of non-compliant charge points. Enforcement concentrates on manufacturers and distributors rather than installers or operators. Civil penalties of up to £10,000 per non-compliant unit (Sch.2 para.11) create proportionate deterrence for volume sales.
Smart functionality and DSR (Regs.5-7, 10-11)
Three layers of demand-side response capability are mandated:
Layer 1, Smart capability (Reg.5): charge points must send/receive data via a communications network, respond to external signals by adjusting electricity rate or timing, and be capable of providing demand side response services. At least one user interface must be provided.
Layer 2, Off-peak defaults (Reg.10): charge points must incorporate pre-set default charging hours outside peak hours (Reg.10(1)). On first use, the owner chooses whether to accept, remove, or change these defaults (Reg.10(2)).
Layer 3, Randomised delay (Reg.11): a default delay of up to 600 seconds of random duration prevents synchronised demand at tariff boundaries (Reg.11(2)). The maximum can be adjusted remotely up to 1800 seconds (Reg.11(1)). The delay does not operate during active DSR or owner override (Reg.11(4)).
Supplier interoperability (Reg.6): smart functionality must survive an electricity supplier switch. Offline resilience (Reg.7): the charge point must still charge vehicles when disconnected from the network.
Owner control: throughout, the owner retains override rights over DSR services (Reg.10(3)), default charging hours (Reg.10(2)), and randomised delay (Reg.11(2)).
Safety and measurement (Regs.8-9)
Charge points must prevent operations that risk health or safety (Reg.8). Energy measurement must be in watt-hours or kilowatt-hours, with duration recorded (Reg.9(1)), accurate to within 10% with no systematic errors (Reg.9(3)). Owners must be able to view data by individual use, by month, or over 12 months (Reg.9(2)).
The 10% accuracy tolerance is lax compared to Measuring Instruments Regulations 2016 for electricity meters (typically 1-2%). Charge point meters serve consumer information, not billing settlement.
Cybersecurity (Schedule 1)
Eleven security requirements align with ETSI EN 303 645 IoT security baseline: - Unique passwords, no default resets (para.2) - Securely updatable software with integrity verification (para.3) - Owner consent for personal data in DSR (para.4) - Encrypted communications (para.5) - Tamper detection (para.6) - Secure boot (para.7) - Hardened interface, with unnecessary interfaces disabled (para.8) - Secure credential storage (para.9) - Security log with UTC timestamps (para.10) - Vulnerability disclosure policy at point of sale (para.11)
Assurance and record-keeping (Regs.13-14)
Every charge point sold must be accompanied by a signed statement of compliance (Reg.13(1)-(2)). A technical file covering design, manufacture, operation, test reports, and software version must exist and be supplied on request (Reg.13(3)-(4)). Sellers must maintain a register of sales for 10 years (Reg.14).
Enforcement (Reg.15, Schedule 2)
Enforced by the Secretary of State (Reg.15). Schedule 2 provides investigatory powers (Part 1), civil sanctions including compliance notices with recall power and penalties up to £10,000/unit or £250,000 (Parts 2), enforcement undertakings (Part 3), and publication of enforcement action (Part 4).
Defined terms
See the source file defined terms register for 17 defined terms including "smart functionality", "demand side response services", "relevant charge point", and "owner".
Cross-references
- Legal basis: Automated and Electric Vehicles Act 2018, ss.15-18
- Data protection: UK GDPR
- Enforcement framework: Regulatory Enforcement and Sanctions Act 2008
- Related: Alternative Fuels Infrastructure Regulations (public chargers)
Character positions
No character positions recorded for this instrument.