{
  "url": "https://openlegislation.uk/product-security-and-telecommunications-infrastructure-security-requirements-for-relevant-connectable-products-regulations-2023/schedule-2/paragraph-1",
  "json_url": "https://openlegislation.uk/product-security-and-telecommunications-infrastructure-security-requirements-for-relevant-connectable-products-regulations-2023/schedule-2/paragraph-1.json",
  "legislation": "uksi/2023/1007",
  "legislation_title": "The Product Security and Telecommunications Infrastructure (Security Requirements for Relevant Connectable Products) Regulations 2023",
  "legislation_url": "https://openlegislation.uk/product-security-and-telecommunications-infrastructure-security-requirements-for-relevant-connectable-products-regulations-2023",
  "path": "schedule/2/paragraph/1",
  "kind": "paragraph",
  "number": "1",
  "heading": "Passwords",
  "text": "(1) A manufacturer is to be treated as complying with the security requirement at paragraph 1 of Schedule 1 where any of the conditions in sub-paragraphs (2) to (4) are met.\n(2) Condition A is that the manufacturer complies with provision 5.1-1 of ETSI EN 303 645 and, where relevant, provision 5.1-2 of ETSI EN 303 645 as if those provisions apply to the categories of hardware and software specified in paragraph 1(1) of Schedule 1.\n(3) Condition B is that the relevant connectable product, of which they are the manufacturer, is currently assigned a conformance label under the Japan JC-STAR STAR-1 as an indicator of compliance with the requirements set out in JC-STAR STAR-1, and that label has not expired.\n(4) Condition C is that the relevant connectable product, of which they are the manufacturer, is currently awarded a label under any level of the Singapore Cybersecurity Labelling Scheme as an indicator of compliance with the requirements set out in that scheme, and that label has not expired.",
  "extent": "E+W+S+N.I.",
  "status": null,
  "version": "current",
  "annotations": [
    {
      "type": "F",
      "label": "F1",
      "text": "Words in Sch. 2 para. 1(1) substituted (4.12.2025) by The Product Security and Telecommunications Infrastructure (Security Requirements for Relevant Connectable Products) (Amendment) (No. 2) Regulations 2025 (S.I. 2025/1267), regs. 1(2), 5(2)"
    },
    {
      "type": "F",
      "label": "F2",
      "text": "Words in Sch. 2 para. 1(2) substituted (4.12.2025) by The Product Security and Telecommunications Infrastructure (Security Requirements for Relevant Connectable Products) (Amendment) (No. 2) Regulations 2025 (S.I. 2025/1267), regs. 1(2), 5(3)"
    },
    {
      "type": "F",
      "label": "F3",
      "text": "Sch. 2 para. 1(3)(4) inserted (4.12.2025) by The Product Security and Telecommunications Infrastructure (Security Requirements for Relevant Connectable Products) (Amendment) (No. 2) Regulations 2025 (S.I. 2025/1267), regs. 1(2), 5(4)"
    },
    {
      "type": "I",
      "label": "I1",
      "text": "Sch. 2 para. 1 in force at 29.4.2024, see reg. 1(2)"
    }
  ],
  "outstanding_effects": [],
  "provenance": {
    "source": "legislation.gov.uk",
    "source_url": "https://www.legislation.gov.uk/uksi/2023/1007/schedule/2/paragraph/1",
    "retrieved_at": "2026-10-28T21:40:33.864512+00:00"
  },
  "licence": "Open Government Licence v3.0",
  "licence_url": "https://www.nationalarchives.gov.uk/doc/open-government-licence/version/3/",
  "attribution": "Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives."
}