Starting from April 29, 2024, the United Kingdom will implement a consumer connectable product security regime.
This requires manufacturers of UK consumer connectable products to meet minimum security requirements.
These requirements are based on the UK’s Code of Practice for Consumer IoT security, the global standard ETSI EN 303 645, and advice from the National Cyber Security Center.
The regime also involves other businesses in the supply chains to prevent the sale of insecure products.
The regime consists of two legislations:
- Part 1 of the PSTI (Product Security and Telecommunications Infrastructure) Act 2022 and
- the Product Security and Telecommunications Infrastructure (Security Requirements for Relevant Connectable Products) Regulations, subject to parliamentary approval.
The PSTI Act received Royal Assent in December 2022, and the regulations are subject to parliamentary approval. Once approved and after fulfilling international treaty obligations, the consumer connectable product security regime will take effect on April 29, 2024.
See attached PDF for the official source.
Type Approval Impacted? This will add new requirements for the current scheme
Spectrum Impacted? No
Imports Impacted? Yes
Standards: No
Product Impacted? All consumer connectable products