PSTI

Selling smart devices in the UK?
Check if you need to comply with new security requirements!

New regulations originally introduced by the Product Security and Telecommunications Infrastructure (PSTI) Act 2022 entered into force on the 29^th April 2024.  If you’re selling in the UK, what does this mean for you?

Minimum security requirements

The PSTI Act introduces minimum security requirements for ‘consumer connectible’ devices sold in the UK, often marketed as ‘smart’ or IoT (Internet of Things) devices. 

These security requirements include:

• Password security – universal default passwords are prohibited
• Security management – information must be provided on consumers can report safety issues
• Software updates – products must have a disclosed security update cycle with an end-date

What products are covered?

The PSTI Act covers internet-connected products such as smartphones, smart TVs and other home appliances, alarm systems, and automative-related products.

Some exemptions apply:

• Products sold in Northern Ireland
• Electric vehicle charging points
• Medical equipment
• Smart meters
• Desktop computers, laptops and tablets without a cellular connection (unless designed for children under the age of 14)

Who is required to comply with the PSTI Act?

Manufacturers, importers and distributers (e.g. resellers) are all required to comply. 

To ensure compliance, sellers will need to supply a Declaration of Conformity which includes the following information:

• Product details (type and batch numbers where applicable)
• Name and address of manufacturer, and the authorised representative (if applicable)
• Declaration of compliance with the relevant product safety legislation
• Declaration of the minimum support period for the product, including an end-date

Selling with TBA Global

We have proudly supported many businesses looking to expand into the UK through our wide range of compliance services.  Whether it is VAT, EPR or even company registration, we can help. 

Find out more by getting in touch with us at info@tbaglobal.com. 

Reference:

https://www.legislation.gov.uk/ukpga/2022/46/contents/enacted

https://www.gov.uk/government/news/new-laws-to-protect-consumers-from-cyber-criminals-come-into-force-in-the-uk

https://www.gov.uk/government/publications/the-uk-product-security-and-telecommunications-infrastructure-product-security-regime