What are the new laws?
Until now, manufacturers were expected to follow security guide lines, but under these latest legislation, manufacturers will have to meet minimum security standards which makes three new requirements:
- Password procedures are more secure. They will be banned from having weak, easily guessable default passwords like 'admin' or '1234'.
- Manufacturer contact details are easy to find so that bugs and security issues can be easily reported and dealt with.
- Manufacturers and retailers will have to be open with consumers on the minimum time they will receive important security updates and support for on the device they are buying.
From game consoles and smart doorbells to phones and broadband routers, these changes will affect every type of digital product in your home. The government has given a two-year window to adapt to all of this.
What will this mean for your broadband?
We’ve summed up below some of the actions taken in regards to the new Product Security and Telecommunications Infrastructure (PSTI) announcement. Every provider, even the smaller alternative networks have to adhere to these new rules. Contact your provider directly if you have any concerns or queries.
Sky
There was an immediate reaction by Sky. They responded by emailing customers with older routers to warn them that their kit “no longer receives service and security updates”. Anyone getting contacted with this news should be likely to get a free upgrade.
TalkTalk
Have responded saying they are already compliant with the new legislation requirements.
Virgin Media
Virgin Media have added a security information page on their website assuring customers they are compliant and detailing a direct contact number if anyone has experienced any security issues.
BT
BT say they are already fully compliant with these new regulations. The broadband routers customers have are still supported by security updates and would not need to be upgraded at this time. They add that they are continually reviewing products and services.
Vodafone
Vodafone have set up a helpful PSTI page on their website. It explains how they are complying with all the requirements and gives a contact number for anyone with security issues. You can also check all Vodafone products – there’s a search ox where you type the name of your device – and it will explain how these comply to the legislation.
Giving customers more confidence in connected devices
The move marks a significant step towards boosting the UK’s resilience towards cyber-crime, as recent figures show 99% of UK adults own at least one smart device and UK households own an average of nine connected devices. The new laws will also help give customers confidence in buying and using products, which will in turn help grow businesses and the economy.
An investigation conducted by Which? showed that a home filled with smart devices could be exposed to more than 12,000 hacking attacks from across the world in a single week, with a total of 2,684 attempts to guess weak default passwords on just five devices.
Minister for Cyber, Viscount Camrose said:
“As every-day life becomes increasingly dependent on connected devices, the threats generated by the internet multiply and become even greater.
From today, consumers will have greater peace of mind that their smart devices are protected from cyber criminals, as we introduce world first laws that will make sure their personal privacy, data and finances are safe.
We are committed to making the UK the safest place in the world to be online and these new regulations mark a significant leap towards a more secure digital world.”
