Product Security and Telecommunications Infrastructure (PSTI) Act

Jurisdiction
United Kingdom
Region
Europe
Requirement
Required
Organization
UK Parliament
Provision
Part 1, Chapter 2, Sec. 8 of the PSTI Act & PSTI Regulations 2023, Schedules 1 and 2
Applies to
Manufacturers, importers and distributors of consumer connectable products in the UK
Date
April 29, 2024
Description

The Product Security and Telecommunications Infrastructure Act 2022, Chapter 1 allows the Secretary of State to specify security requirements for connected devices.

PSTI Regulations 2023, Schedule 1, 2 requires that connected device manufacturers:Provide publicly available information on how to report security issues and publish in English at least one point of contact for security issues relating to their products (hardware or software), including when notifiers will receive acknowledgments and status updates, in an accessible, clear and transparent way, without any prior request for personal information.