G/TBT/N/GBR/62  
4 May 2023  
(23-3151) Page: 1/3 
Committee on Technical Barriers to Trade  Original:  English  
 
  
NOTIFICATION  
The following notification is being circulated in accordance with Article 10.6  
 
1. Notifying Member:  UNITED KINGDOM  
If applicable, name of local government involved (Article 3.2 and 7.2):   
2. Agency responsible:  Department for Science, Innovation and Technology (DSIT)  
Name and address (including telephone and fax numbers , email and website 
addresses, if available) of agency or authority designated to handle comments 
regarding the notification shall be indicated if  different from above:   
UK TBT Enquiry Point  
Trade Policy Group  
Department for International Trade  
Old Admiralty Building  
London  
SW1A 2DY  
TBTEnquiriesUK@trade.gov.uk  
3. Notified under Article 2.9.2 [X ], 2.10.1 [  ], 5.6.2 [  ], 5.7.1 [  ], 3.2 [  ], 7.2 [  ], 
other :  
4. Products covered (HS or CCCN where applicable, otherwise national tariff 
heading. ICS numbers may be provided in addition, where applicable):  This 
notification covers consumer connectable p roducts defined as a 'internet -connectable' 
product or a 'network -connectable' product. This relates to the HS Code List of Chapter 
84 and 85.  
In scope products include but are not limited to:  
● smartphones  
● connectable cameras, TVs and speakers  
● connect able children's toys and baby monitors  
● connectable safety -relevant products such as smoke detectors and door locks  
● Internet of Things base stations and hubs to which multiple devices connect  
● wearable connectable fitness trackers  
● outdoor leisure pro ducts, such as handheld connectable GPS devices that are not 
wearables  
● connectable home automation and alarm systems  
● connectable appliances, such as washing machines and fridges  
● smart home assistants  
Laptops, PCs, medical devices, tablets without a cellular connection, smart charge points 
and smart metering products are out of scope.  G/TBT/N/GBR/62  
 
- 2 - 
 
  5. Title, number of pages and language(s) of the notified document:  Draft of the 
Product Security and Telecommunications Infrastructure (Security Requirements  for 
Relevant Connectable Products) Regulations 2023; (10 page(s), in English)  
6. Description of content:  The draft of the Product Security and Telecommunications 
Infrastructure (Security Requirements for Relevant Connectable Products) Regulations 
2023 su pplement Part 1 of the Product Security and Telecommunications Infrastructure 
Act 2022 as notified to the TBT Committee under symbol G/TBT/N/GBR/44. The draft 
Regulations set out the UK government's intended minimum security requirements for 
manufacturers of consumer connectable products made available to UK consumers. They 
also include a list of products intended to be excepted from the regulatory regime. The 
draft Regulations also set out additional administrative provisions relating to statements 
of comp liance, which are required to be provided alongside products.  
7. Objective and rationale, including the nature of urgent problems where 
applicable:   
The objective of this measure is to protect consumers and businesses in the UK and the 
wider infrastructu re. 
Consumer connectable products (also known as consumer Internet of Things (IoT)) are 
becoming commonplace in millions of homes around the world and uptake of these 
products increased further as a result of the COVID -19 pandemic.  
Many of these products o n the market today still have basic flaws, such as universal 
default passwords, which leave them vulnerable to cyberattacks such as DDoS 
(Distributed Denial of Service) attacks. Cyber criminals are increasingly targeting these 
products.  
The UK government's Product Security and Telecommunications Infrastructure Act 2022, 
taken alongside the draft of the Product Security and Telecommunications Infrastructure 
(Security Requirements for Relevant Connectable Products) Regulations, represent widely 
recognised good practice, and regulation was strongly supported in a 2019 consultation 
on regulatory options.  
Since 2018, the UK government has worked in partnership with international 
organisations including ETSI (European Telecommunications Standards Insti tute), to 
develop Technical Specification 103 645 in February 2019, and European Standard (EN) 
303 645 v2.1.1 in June 2020. These outputs are the product of intense feedback from 
representatives from up to 65 countries. The Product Security and Telecommunications 
Infrastructure (Security Requirements for Relevant Connectable Products) Regulations 
will mandate requ irements based on paragraphs 5.1 -1, 5.1 -2, 5.2 -1 and 5.3 -13 of 
European Standard (EN) 303 645 v2.1.1 . 
Prevention of deceptive practices and consumer  protection  
8. Relevant documents:   
The latest version of the draft of the Product Security and Telecommunications 
Infrastructure (Security Requirements for Relevant Connectable Products) Regulations 
2023 is attached as a PDF document.  
1. Product Security an d Telecommunications Infrastructure Act 2023 can be found 
here: https://www.legislation.gov.uk/ukpga/2022/46/contents  
2. The Impact Assessment from the Department for Digital, Culture, Medi a and Sport 
for the Product Security and Telecommunications Infrastructure (Product 
Security) regime can be found here (also attached): 
https://publ ications.parliament.uk/pa/bills/cbill/58 -
03/0003/amend/PSTI_IA_reintro_0510.pdf  
3. Proposals for regulating consumer smart product cyber security - call for views 
2020: https://www.gov.uk/government/publications/proposals -for-regulating -
consumer -smart -product -cyber -security -call-for-views/proposals -for-regulating -
consumer -smart -product -cyber -security -call-for-views  G/TBT/N/GBR/62  
 
- 3 - 
 
  4. The government response to that call for views can be found here: 
https://www.gov.uk/government/publications/regulating -consumer -smart -
product -cyber -security -government -response  
9. Proposed date of adoption:  Anticipated in 2023  
Proposed date of entry into force:  29 April 2024  
10. Final date for comments:  60 days from notification  
11. Texts available from:  National enquiry point [ ] or address, telephone and fax 
numbers and email and website addresses, if available , of other body:   
UK TBT Enquiry Point  
Trade Policy Group  
Department for International Trade  
Old Admiralty Building  
London  
SW1A 2DY  
TBTEnquiriesUK@trade.gov.uk  
https://members.wto.org/crnattachments/2023/TBT/GBR/23_09463_00_e.pdf  
https://members.wto.org/crnattachments/2023/TBT/GBR/23_09463_01_e.pdf