UK introduces new IoT rules to improve safety

As the connected object segment is growing, the UK Government has come up with new rules, forcing the ecosystem to take a more rigorous and conscious approach to security.    

The new law has been drafted by the Department for Digital, Culture, Media and Sport (DCMS). The law has been framed focusing on three requirements for the manufacture and sale of connected objects in the UK:

Devices must have unique passwords and no ‘factory reset’ option

Reporting functions for vulnerabilities must be created by all manufacturers

Consumers must be made aware of the minimum length of time security updates will be received for the products at the point of sale

At present, the connected devices are widely available in the market and the security credentials of some are questionable. There are likely to be many reasons for this, though the pursuit of profitability is likely to be sitting at the top of the list.

Security is a growing concern for the general public in an increasingly digital society, though the risks are still greatly undervalued. It would be safe to assume only a small number of consumers would genuinely veto a purchase due to digital security concerns, and in the absence of consumer pressure for greater security, the Government is seemingly forcing the hand of the IoT ecosystem.

As per news report, Digital Minister Matt Warman said, “We want to make the UK the safest place to be online with pro-innovation regulation that breeds confidence in modern technology.”

“Our new law will hold firms manufacturing and selling internet-connected devices to account and stop hackers threatening people’s privacy and safety. It will mean robust security standards are built in from the design stage and not bolted on as an afterthought.”