Cybersecurity Policy Report, U.S., EU Agree to Collaborate on IoT Cybersecurity, (Jan 12, 2024)
The European Union has tentatively agreed that Internet of things (IoT) devices eligible for the U.S. Cyber Trust Mark will be deemed compliant with the EU’s emerging regulations for IoT cybersecurity, according to Anne Neuberger, the White House deputy national security adviser–cyber and emerging technology.
“I’m excited to announce that we signed an agreement with the European Union—a huge market for tech—on a joint roadmap” to improve IoT security, Ms. Neuberger said yesterday at the Consumer Technology Association’s CES 2024 trade show in Las Vegas.
“We’ve agreed to partner from the beginning because we want companies to know when they test their product once to meet the cybersecurity standard, they can sell anywhere. They can sell in Paris, Texas, or Paris, France,” she said.
“We brought in the EU from the beginning. Clearly, we all want consumers to feel safe. We all want our critical infrastructure using connected tech to be safe from disruption,” Ms. Neuberger said.
She said progress toward establishing the U.S. Cyber Trust Mark program was “moving along at a quick clip” and should be complete by year-end. “Shortly thereafter, consumers shopping online or in stores can look for the mark and know they’re bringing cyber safe products into their homes or into their offices,” she added.
The FCC has taken the lead in establishing the Cyber Trust Mark program. The Commission unanimously adopted a notice of proposed rulemaking in PS docket 23-239 last August and received comments on the proposal last October (CPR, Oct. 10, 2023).
Under the voluntary program, IoT devices that meet cybersecurity standards established by the National Institute of Standards and Technology would be eligible to display a label certifying their compliance. The effort has been likened to the Energy Star program overseen by the Department of Energy and Environmental Protection Agency to promote energy efficiency by allowing manufacturers to place stickers on appliances that meet energy performance goals.
The EU is engaged in a similar IoT cybersecurity effort through its proposed Cyber Resilience Act, which would impose cybersecurity obligations on developers of software and IoT devices. The EU legislation is headed for final approval following an agreement between the European Parliament and Council of the EU on its final text (CPR, Dec. 1, 2023).
MainStory: TopStory FederalLegislation InternationalLegislation DataSecurity