Compliance and Advisory Services for the UK’s PSTI Act

As of 29 April 2024, buyers of connectable consumer devices in the United Kingdom (UK) will benefit from enhanced cybersecurity regulations that aimed at manufacturer requirements to safeguard privacy and data.

The Product Security and Telecommunications Infrastructure (PSTI) Act’s product security regime is the first in the world to require basic cybersecurity protections before connected consumer products can enter the UK market for sale.      

This legislation covers a wide range of popular consumer electronics featuring connectivity features, including:

Exploring provisions of the PSTI Act

In an effort to make connectable consumer products less susceptible to cyberattack, the PSTI Act includes common-sense approaches to eliminate features that are known dangers.

• Password strength – No more universal default passwords or default passwords that are easily guessable.
• Increased accountability – Manufacturers must have a public point of contact where consumers can easily report vulnerabilities.
• Greater transparency – Manufacturers must clearly communicate to consumers regarding minimum timeframe for security updates.

What connected device manufacturers need to do

The UK has been phasing in aspects of the PSTI Act since 2022, and this new product security regime represents the latest addition to this security-minded law.

Significant penalties for lack of compliance

The UK Office for Product Safety and Standards (OPSS) is tasked with enforcing the PSTI Act, including the April 2024 product security regime. The OPSS is the enforcement agency for the UK’s product safety regulations, part of the Department for Business and Trade.

The PSTI Act features clear penalties to manufacturers who sell products that are not in compliance to Part 1 as of 29 April, 2024, such as:

• Seizure and destruction of products
• Initial fine of £10 million or more
• Fine of 4% of the manufacturer's global revenue
• Daily fines of £20,000 for ongoing breaches

How UL Solutions helps manufacturers prepare and comply with the PSTI Act

UL Solutions works closely with manufacturers to help them anticipate emerging regulations cost-effectively. We can work with you to adopt minimal EN 303 645 to demonstrate compliance with the PSTI Act and prepare for the future regulations, including the EU Radio Equipment Directives (RED).

By working with UL Solutions, manufacturers receive expert guidance from an independent provider.

Our compliance services include testing, attestation and Statements of Compliance on behalf of customers. We also offer advisory services to aid manufacturers in making a transition, including regulation digests and product lines studies, and business and logistics guidance.