# The Product Security and Telecommunications Infrastructure (Security Requirements for Relevant Connectable Products) Regulations 2023, Paragraph 3: Information on minimum security update periods


(1) A manufacturer is to be treated as complying with the security requirement at paragraph 3 of Schedule 1 where the condition in sub-paragraph (2) is met.
(2) The condition is that, subject to sub-paragraphs (3), (5) and (6) of paragraph 3 of Schedule 1 and to sub-paragraphs (3) and (4), the manufacturer complies with provision 5.3-13 of ETSI EN 303 645 as if that provision applies to the categories of hardware and software specified in paragraph 3(1) of Schedule 1.
(3) References at provision 5.3-13 of ETSI EN 303 645 to “defined support period” are to be construed in accordance with the definition in regulation 2.
(4) Reference at provision 5.3-13 of ETSI EN 303 645 to the information being published in an accessible way that is clear and transparent includes making the information available to a person (“P”)—
(a) without prior request for such information being made;
(b) in English;
(c) free of charge;
(d) without requesting the provision of P’s personal information; and
(e) in such a way that is understandable by a reader without prior technical knowledge.

---
Source: https://www.legislation.gov.uk/ukdsi/2023/9780348249767/schedule/2/paragraph/3 (the official version)
Page: https://openlegislation.uk/draft-product-security-and-telecommunications-infrastructure-security-requirements-for-relevant-connectable-products-regulations-2023/schedule-2/paragraph-3
Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives.