The European Commission has been working on a range of measures
to strengthen cybersecurity of consumer IoT products, and has just
launched a public consultation. This provides an important
opportunity to make a contribution to the future direction of
regulation in this area in the EU. At the same time, the UK is
actively considering the future of regulation in this area, with
its public consultation having recently been completed. More
details below.
At the EU level, Regulation (EU) 2019/881 on ENISA (the European
Union Agency for Cybersecurity) and on information and
communication technology cybersecurity certification (known as the
"Cybersecurity Act") entered into force
in June. The Cybersecurity Act creates a framework for
EU-wide cybersecurity certification schemes to be established for
specific technology products, processes and services. The
framework comprises a set of rules, technical requirements,
standards and procedures for each scheme.
