Starting Monday, all internet-connected smart devices in the UK will be required to meet minimum security standards under a new set of regulations aimed at protecting consumers and businesses from the growing threat of hacking and cyber-attacks. The UK government has dubbed these laws as “world first,” designed to shield users from vulnerabilities in smart gadgets that have become common targets for cybercriminals.
The new regime will prohibit manufacturers from using weak, easily guessable default passwords, such as “admin” or “12345,” which have long been a weak link in the security of smart devices. If a device comes with a common password, users will now be prompted to change it during the initial setup to a more secure one. This move comes in response to alarming findings from the UK-based consumer advocacy group Which?, which revealed that a typical UK household filled with smart devices could be subjected to over 12,000 hacking attempts in just a week. In their study, just five smart devices were targeted with 2,684 attempts to guess weak default passwords.
“From today, consumers will have greater peace of mind that their smart devices are protected from cybercriminals, as we introduce world-first laws that will make sure their personal privacy, data, and finances are safe,” said UK Minister for Cyber Viscount Camrose, Jonathan Berry.
Strengthening cybersecurity for smart devices
The UK’s Department for Science, Innovation and Technology highlighted that the new regulations will apply to a wide range of devices, including smartphones, gaming consoles, smart fridges, and any other gadgets with internet or network connectivity. Under these laws, manufacturers will be required to protect users from cybercriminals who exploit security weaknesses to access personal information, spy on users, or disrupt device functionality.
These regulations are a key part of the UK government’s broader effort to bolster cybersecurity across the country, as outlined in the GBP 2.6-billion National Cyber Strategy. The goal is to protect both consumers and the economy from the fallout of cyber-attacks, which can result in financial losses, data breaches, and loss of trust in digital systems.
“Our pledge to establish the UK as the global standard for online safety takes a big step forward with these regulations, moving us closer to our goal of a digitally secure future,” said Julia Lopez, UK Data and Digital Infrastructure Minister.
Increased accountability for manufacturers and retailers
In addition to banning weak default passwords, the new laws require manufacturers to publish contact information that consumers and security experts can use to report security vulnerabilities or other issues with devices. This aims to ensure that security flaws are quickly addressed and that users remain protected from new threats that may emerge after the devices are in use.
More Read
Retailers will also face new responsibilities under these laws. They must clearly inform consumers of the minimum time during which their smart devices will receive essential security updates. This transparency will help consumers make more informed choices when purchasing devices, particularly as older models often become more vulnerable once manufacturers stop providing updates.
A model for global cybersecurity standards
The new UK regulations are part of the Product Security and Telecommunications Infrastructure (PSTI) regime, specifically designed to improve the country’s resilience against cyber-attacks and prevent malign interference from damaging both the UK and global economy. The laws not only aim to secure the digital ecosystem at home but also set a precedent for international cybersecurity practices.
As internet-connected devices become more ubiquitous in daily life, from smart home systems to personal gadgets, the risk of cyber-attacks has escalated. These new laws mark a significant step toward safeguarding individuals and businesses from these evolving threats. With the UK setting the standard, it is expected that other countries may adopt similar legislation to protect their citizens from the growing dangers of cybercrime.
The UK’s proactive approach to cybersecurity through these new laws underscores the importance of building a safer digital future, ensuring that consumers are not left vulnerable to cyber-attacks that exploit the rapid expansion of smart technology.
