Core requirements of the new regulation: First, mandatory cybersecurity certification, smart elevators must comply with EN 18031 standard, have six core functions: password protection, data encryption, access control, vulnerability protection, intrusion detection and security audit, prevent cyber attacks, illegal control and data leakage; Second, personal information protection, personal information such as elevator face recognition and call data must be encrypted and stored, transmitted, comply with EU GDPR privacy protection requirements, retain data traceability and deletion functions; Third, functional safety assessment, elevator control system software must pass the assessment of unit test coverage ≥95% and fault diagnosis coverage ≥98%, with safe and fault-tolerant algorithm logic, comply with GB/T 35850.1 standard; Fourth, standardized certification process, must be completed testing, audit and certification by EU Notified Body, certificate valid for 3 years, annual supervision audit, test reports mutually recognized throughout the EU; Fifth, tightened market supervision, EU customs and market supervision departments list smart elevators as key inspection objects, products without CE-RED certification are directly returned or destroyed, violating enterprises are fined up to 35% of the goods value, and listed in the EU market blacklist.