Product Security and Telecommunications Infrastructure Act 2022

The relevant parts of this Act comes into effect from 29 April and the aim of the Act is to ensure that all tech-based consumer products, which are capable of connecting to the internet, sold in the UK meet a minimum standard of security. It will impact all businesses which manufacture, import and/or distribute “Internet of Things” (IoT) products or networked products – from CCTV cameras, to alarms, kettles, fridges and more.  

Those caught in scope of the Act must provide:  

• Clear information on the support period at point of sale – how long the manufacturer will continue to provide updates. 
• No default passwords. 
• Reporting of security issues – providing information on where anyone who finds a vulnerability can inform the manufacturer, provide a fix in a timely manner.