The FCC has established a voluntary cybersecurity labeling program for certain wireless consumer Internet of Things (IoT) products. Under this new program, qualifying consumer smart products that meet certain cybersecurity standards will bear a label, including a new U.S. Cyber Trust Mark, that will assist consumers in making informed purchasing decisions, differentiating products in the marketplace, and creating incentives for manufacturers to meet higher cybersecurity standards.
Program highlights include the following: (1) the U.S. Cyber Trust Mark logo will be displayed with a QR code that consumers can scan for certain details about the product’s security; (2) the program will rely on public-private collaboration, with the FCC providing oversight and approved third-party label administrators managing activities such as evaluating product applications; and (3) compliance testing will be handled by accredited labs.
The FCC is also seeking comment on potential disclosure requirements, including whether a product’s software or firmware is developed or deployed by a company that is located in a country that presents national security concerns and whether consumer data collected by the product will be sent to servers located in such a country.
