What it means
The label is intended to give shoppers a simple signal that a device meets a defined security baseline, including unique passwords, updates and vulnerability handling. Programme details and the list of recognised administrators continue to develop, so the current requirements should be confirmed before planning a launch around the mark.
Applies to
- Consumer IoT products sold in the United States
- Retailers and marketplaces that promote the label
- Manufacturers planning a security differentiation strategy
What it does not cover
- Radio equipment authorisation, which is separate
- A substitute for privacy law compliance
- Industrial or enterprise device security
Verification checklist
- Check the current programme scope and requirements
- Align the device with the underlying security criteria
- Plan for third-party testing and label administration
- Keep a public support and update commitment