What UK Product Security and Telecommunications Infrastructure Act 2022 - Part 1 Relevant Connectable Products requires
Part 1 of the UK Product Security and Telecommunications Infrastructure Act 2022 (c.46) and the Product Security and Telecommunications Infrastructure (Security Requirements for Relevant Connectable Products) Regulations 2023 (SI 2023/1007) establish the United Kingdom's mandatory consumer connectable-product security regime, which came into force on 29 April 2024. Section 1 defines a relevant connectable product as a product that can connect to the internet or to a network and is supplied to UK consumers, with categories of excepted products designated by the Secretary of State. Section 4 imposes the compliance requirement on manufacturers, importers, and distributors to ensure relevant connectable products comply with the security requirements specified in regulations. The PSTI Regulations 2023 Schedule 1 sets three baseline security requirements: paragraph 1 prohibits universal default passwords (any password must be unique per device or set on first use by the user); paragraph 2 requires a published vulnerability disclosure policy (point of contact for security researchers, acknowledgment timeline, status updates); paragraph 3 requires transparency about the minimum security update support period (a defined date until which security updates will be issued). Section 7 requires a statement of compliance to accompany every product placed on the UK market before supply. Section 8 requires records to be retained for 10 years. Section 9 grants the Office for Product Safety and Standards (OPSS) as enforcement authority investigatory powers including section 22 information notices, section 26 compliance notices, section 27 stop notices, and section 28 recall notices. Section 49 establishes monetary penalties up to GBP 10 million or 4% of qualifying worldwide revenue (whichever greater) for non-compliance.
Pillar: Industrial IoT & Energy · Authority: UK Parliament - Product Security and Telecommunications Infrastructure Act 2022 c.46; Department for Science Innovation and Technology (DSIT); Office for Product Safety and Standards (OPSS) within the Department for Business and Trade · Version: 1.0.0 · Last updated:
Primary source: https://www.legislation.gov.uk/ukpga/2022/46/part/1
SHA-256 integrity: 8cee5e24e622746c6957c70b47af818e8a85d56371a81f91899557ecdea4512f
Primary Citations — 8 traced to source
- Product Security and Telecommunications Infrastructure Act 2022 c.46 Part 1 https://www.legislation.gov.uk/ukpga/2022/46/part/1
- PSTI Act 2022 section 1 relevant connectable products https://www.legislation.gov.uk/ukpga/2022/46/section/1
+ 6 more citations (full bibliography, deterministic workflow, actionable schema and crosswalks) included in the vault unlock — $0.01 via Skyfire / L402 / Direct Base USDC.
Access
- Discovery (free): /api/v1/nodes/uk-psti-act-2022-relevant-connectable-products-security.json — 6-field metadata
- Vault (full node): /api/v1/vault/nodes/uk-psti-act-2022-relevant-connectable-products-security.json — full 13-key payload, $0.01 USDC (L402/Skyfire/Direct Base)
- Canonical URL: https://bidda.com/intelligence/uk-psti-act-2022-relevant-connectable-products-security
- Back to registry: Browse all 10,090 compliance nodes