USA: Voluntary Cybersecurity Labeling for Internet of Things

 

USA has published a proposed rulemaking: Cybersecurity Labeling for Internet of Things.

In this document, the Federal Communications Commission (Commission) proposes measures to improve consumer confidence and understanding of the security of their connected devices—commonly known as Internet of Things (IoT) devices—that are woven into the fabric of their everyday lives. To provide consumers with the peace of mind that the technology being brought into their homes is reasonably secure, and to help guard against risks to communications, the Commission proposes a voluntary cybersecurity labeling program that would provide easily understood, accessible information to consumers on the relative security of an IoT device or product, and assure consumers that manufacturers of devices bearing the Commission’s IoT cybersecurity label adhere to widely accepted cybersecurity standards.

In this regard, the Commission’s cybersecurity labeling program would help consumers compare IoT devices and make informed purchasing decisions, drive consumers toward purchasing devices with greater security, incentivize manufacturers to meet higher cybersecurity standards to meet market demand, and encourage retailers to market secure devices. The proposed IoT label would offer a trusted, government-backed symbol for devices that comply with IoT cybersecurity standards.

Comments to the proposed rulemaking are due on or before September 25, 2023.

Full information about the rulemaking can be found HERE.

To find out more about product compliance and cybersecurity requirements for products, please contact the Product Compliance Institute directly.