Mandating Security Requirements For Consumer 'IoT' Products: Consultation Stage Impact Assessment

Abstract

Many consumer internet-connected devices, such as smart TVs and smart speakers, lack basic cyber security provisions. The rapid proliferation of these devices and lack of transparent information available means that consumer security, privacy and safety is being compromised. The wider economy also faces an increasing threat of large scale cyber-attacks through exploiting insecure consumer IoT devices. Recommended security requirements are often implemented by manufacturers as an afterthought, if at all, rather than during the design process. By mandating security labels on consumer IoT products,consumers will be able to make more informed purchasing decisions that lead to fewer insecure products on the market.