Explanatory note

These Regulations amend the Product Security and Telecommunications Infrastructure (Security Requirements for Relevant Connectable Products) Regulations 2023 (S.I. 2023/1007) (“the 2023 Regulations”).

Part 1 of the Product Security and Telecommunications Act 2022 (“the 2022 Act”) contains provisions that require manufacturers of relevant connectable products to, among other things, ensure they meet the relevant security requirements (set out in Schedule 1 to the 2023 Regulations) and ensure their products are accompanied by statements of compliance (see sections 8 and 9 of the 2022 Act). The 2022 Act also contain provisions that allow the Secretary of State to specify conditions which, if met, can allow a manufacturer to be treated as having complied with the requirements at sections 8 and 9 of the 2022 Act.

These Regulations specify conditions which, if met, allow manufacturers of a relevant connectable product to be treated as having complied with the security requirements and the requirement to have a product accompanied by a statement of compliance.

Regulation 3 inserts into the 2023 Regulations definitions setting out cybersecurity standards from both Japan and Singapore, which relate to the conditions for deemed compliance inserted into the 2023 Regulations by these Regulations.

Regulations 4 and 8 insert into the 2023 Regulations provisions setting out conditions, which, if met, will allow a manufacturer to be treated as having complied with the requirement to have a relevant connectable product accompanied by a statement of compliance.

Regulations 5 to 7 insert into the 2023 Regulations provisions setting out conditions, which, if met, will allow a manufacturer to be treated as having complied with the relevant security requirements.

An Explanatory Memorandum is published alongside this instrument at https://www.legislation.gov.uk.