Countdown begins for new minimum security standards regime for all consumer products with internet connectivity
The countdown has begun for a new regime setting the minimum security standards for all consumer products with internet connectivity to come into effect in 12 months – making the UK the first country in the world to introduce these protections.
Minister for Artificial Intelligence and Intellectual Property Viscount Camrose today confirmed the new Product Security and Telecommunications Infrastructure (Product Security) Regime will be introduced on 29 April next year, at which point consumers and businesses will benefit from world-first protections against potentially insecure tech. Telecoms and technology industries and manufacturers now have 12 months to prepare for the implementation.
The measures include requirements for manufacturers to implement minimum security standards on all consumer products with internet connectivity such as smartphones, smart speakers, games consoles, and smart doorbells before they can be made available for purchase.
In bringing forward this new regime, the UK becomes the first country anywhere in the world to require minimum protections for consumers and businesses using these devices from cyber security risks. It has only been made possible by the freedoms gained through Brexit, granting the government the ability to implement sector-specific regulations which would not have been possible as an EU Member State.
This new regime will help deliver one of the Government’s five priorities to grow the economy by increasing consumer confidence and protection in the products they buy and use.
Minister for AI and Intellectual Property, Viscount Camrose, said:
The new measures will introduce a series of improved security protections to tackle the threat of cyber crime including:
National Cyber Security Centre CEO Lindy Cameron said:
When in effect, the new regime will result in visible changes for consumers as they move through the purchasing process, with new information on security updates and support periods being available to inform purchasing decisions. If a product is being purchased directly from a manufacturer’s website, the measures will require its support period to be clearly advertised alongside the usual product specifications.
We are also engaging with online marketplaces in preparation for the changes, exploring how they can work to complement these changes and further protect consumers.
Co-Founder and Managing Director of the IoT Security Foundation, John Moor, said:
Offering individuals and businesses across the country point-of-access protection in accessing online services through connectable devices represents a watershed moment, and will establish the UK as a global leader in consumer cyber security when the regime takes effect next April.