By CEDIA - Thu, Feb 20, 2025 - News
The UK government introduced landmark legislation under the Product Security and Telecommunications Infrastructure (PSTI) Act, establishing vital security requirements for network-connected devices. This legislation represents a significant step forward in protecting consumers and ensuring safer smart homes.
For many years, products entering or accessing the UK and EU markets have had to comply with strict requirements on Health & Safety, electromagnetic compatibility (EMC) and performance. The PSTI Bill – which came into effect in the UK on 29 April 2024 – means that all internet-connected or network-connected products also need to meet cyber security requirements, as a new condition of market entry.
Products with factory-set default passwords are prohibited, as they pose an easy target for cyber criminals.
Manufacturers must establish mandatory channels for security researchers to report identified vulnerabilities, enabling swift action to address risks before they can be exploited.
If a product is supported with critical security updates, the minimum duration of this support must be clearly specified.
For CEDIA, this marks a pivotal moment for the smart home industry. Having supported this initiative alongside the Digital Television Group (DTG) and Safeshark – the PSTI and RED compliance specialists – we have played a role in advocating for the interests of integrators and homeowners.
The PSTI Act is a crucial development for our industry. These new regulations establish much-needed security benchmarks for connected devices, offering protection to both consumers and the industry at large. It underpins the importance of secure, well-designed devices in connected homes and highlights the critical role our sector plays in shaping the future of technology. By supporting this effort, we’ve helped ensure that the legislation aligns with the practical needs of our sector, providing clarity for integrators and fostering trust in smart technologies.
The new legislation enhances product credibility and consumer confidence as homeowners will benefit from safer, more reliable connected devices. To support members in navigating these changes, CEDIA offers resources designed to help integrators understand how to incorporate compliant products into their projects seamlessly.
You can learn more by downloading the guide produced by CEDIA and Safeshark titled "Connected devices: accessing the UK and EU markets. Your guide to cyber security requirements for IoT 2024".