UK Government Planning on New Laws for IoT Devices Including a Mandatory Security Labelling Scheme

Home / News

UK Government Planning on New Laws for IoT Devices Including a Mandatory Security Labelling Scheme

By CircleID Reporter
May 01, 2019, 4:52 pm PDT Views: 13,784 Add Comment

The UK government on Wednesday announced plans to introduce new laws for internet connected devices to better enforce the inclusion of basic cybersecurity features into IoT devices. Measures will include labeling requirements—from the press release: “The Government will be consulting on options including a mandatory new labeling scheme. The label would tell consumers how secure their products such as ‘smart’ TVs, toys and appliances are. The move means retailers will only be able to sell items with an Internet of Things (IoT) security label.”

— The government has narrowed its plans to three security requirement: 1) IoT device passwords must be unique and not resettable to any universal factory setting; 2) Manufacturers of IoT products provide a public point of contact as part of a vulnerability disclosure policy; 3)
Manufacturers explicitly state the minimum length of time for which the device will receive security updates through an end of life policy.

— Mandating retailers: Also considered is mandating retailers “to not sell any products that do not adhere to the top three security requirements of the Code.”

By CircleID Reporter — CircleID’s internal staff reporting on news tips and developing stories. Do you have information the professional Internet community should be aware of? Contact us.
Visit Page

Filed Under

Comments

The Weekly Wrap

More and more professionals are choosing to publish critical posts on CircleID from all corners of the Internet industry. If you find it hard to keep up daily, consider subscribing to our weekly digest. We will provide you a convenient summary report once a week sent directly to your inbox. It's a quick and easy read.