{
  "url": "https://openlegislation.uk/product-security-and-telecommunications-infrastructure-act-2022/section-12",
  "json_url": "https://openlegislation.uk/product-security-and-telecommunications-infrastructure-act-2022/section-12.json",
  "legislation": "ukpga/2022/46",
  "legislation_title": "Product Security and Telecommunications Infrastructure Act 2022",
  "legislation_url": "https://openlegislation.uk/product-security-and-telecommunications-infrastructure-act-2022",
  "path": "section/12",
  "kind": "section",
  "number": "12",
  "heading": "Duty to maintain records",
  "text": "(1) A manufacturer of a relevant connectable product must maintain a record of—\n(a) any investigations carried out by the manufacturer in relation to a compliance failure or suspected compliance failure (whether or not as a result of information received as mentioned in section 10(1)(a));\n(b) any compliance failures relating to the product.\n(2) A record of an investigation must contain the following information—\n(a) the outcome of the investigation;\n(b) where the manufacturer determined that there was a compliance failure, details of that compliance failure;\n(c) any steps taken by the manufacturer to remedy the compliance failure and whether or not those steps were successful.\n(3) A record of a compliance failure must contain the following information—\n(a) details of the compliance failure;\n(b) any steps taken by the manufacturer to remedy the compliance failure and whether or not those steps were successful.\n(4) A record of an investigation or a compliance failure must be retained for a period of 10 years beginning with the day on which the record is made.\n(5) In a case where there is more than one manufacturer in relation to a product, the duty of each of those manufacturers to maintain a record under this section may be met by those manufacturers jointly maintaining a single record.\n(6) In this section “compliance failure” means a failure by a manufacturer of the product to comply with a relevant security requirement relating to the product.",
  "extent": "E+W+S+N.I.",
  "status": null,
  "version": "current",
  "annotations": [
    {
      "type": "I",
      "label": "I1",
      "text": "S. 12 not in force at Royal Assent, see s. 79"
    },
    {
      "type": "I",
      "label": "I2",
      "text": "S. 12 in force at 29.4.2024 by S.I. 2023/469, reg. 3"
    }
  ],
  "outstanding_effects": [],
  "provenance": {
    "source": "legislation.gov.uk",
    "source_url": "https://www.legislation.gov.uk/ukpga/2022/46/section/12",
    "retrieved_at": "2026-10-29T08:53:55.212760+00:00"
  },
  "licence": "Open Government Licence v3.0",
  "licence_url": "https://www.nationalarchives.gov.uk/doc/open-government-licence/version/3/",
  "attribution": "Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives."
}