Committee on Technical Barriers to Trade - Notification - United States - Cybersecurity labeling for internet of things

NOTIFICATION

The following notification is being circulated in accordance with Article 10.6

 

1.

Notifying Member: UNITED STATES OF AMERICA

If applicable, name of local government involved (Article 3.2 and 7.2):

2.

Agency responsible:

Federal Communications Commission (FCC) [2072]

Name and address (including telephone and fax numbers, email and website addresses, if available) of agency or authority designated to handle comments regarding the notification shall be indicated if different from above:

Please submit comments to: USA WTO TBT Enquiry Point, Email: usatbtep@nist.gov

3.

Notified under Article 2.9.2 [ ], 2.10.1 [ ], 5.6.2 [ ], 5.7.1 [ ], 3.2 [ ], 7.2 [ ], other [X]: To provide easily understood, accessible information to consumers on the relative security of an IoT device or product.

4.

Products covered (HS or CCCN where applicable, otherwise national tariff heading. ICS numbers may be provided in addition, where applicable): Devices that have at least one transducer (sensor or actuator) for interacting directly with the physical world and at least one network interface (e.g., Ethernet, Wi-Fi, Bluetooth) for interfacing with the digital world; Cybersecurity labeling; IT Security (ICS code(s): 35.030)

5.

Title, number of pages and language(s) of the notified document: Cybersecurity Labeling for Internet of Things; (19 page(s), in English)

6.

Description of content: Proposed rule - In this document, the Federal Communications Commission (Commission) proposes measures to improve consumer confidence and understanding of the security of their connected devices--commonly known as Internet of Things (IoT) devices--that are woven into the fabric of their everyday lives. To provide consumers with the peace of mind that the technology being brought into their homes is reasonably secure, and to help guard against risks to communications, the Commission proposes a voluntary cybersecurity labeling program that would provide easily understood, accessible information to consumers on the relative security of an IoT device or product, and assure consumers that manufacturers of devices bearing the Commission's IoT cybersecurity label adhere to widely accepted cybersecurity standards. In this regard, the Commission's cybersecurity labeling program would help consumers compare IoT devices and make informed purchasing decisions, drive consumers toward purchasing devices with greater security, incentivize manufacturers to meet higher cybersecurity standards to meet market demand, and encourage retailers to market secure devices. The proposed IoT label would offer a trusted, government-backed symbol for devices that comply with IoT cybersecurity standards.

7.

Objective and rationale, including the nature of urgent problems where applicable: Consumer information, labelling; Prevention of deceptive practices and consumer protection

8.

Relevant documents:

88 Federal Register (FR) 58211, 25 August 2023; Title 47 Code of Federal Regulations (CFR) Chapter I:

https://www.govinfo.gov/content/pkg/FR-2023-08-25/html/2023-18357.htm

https://www.govinfo.gov/content/pkg/FR-2023-08-25/pdf/2023-18357.pdf

https://docs.fcc.gov/public/attachments/FCC-23-7A1.pdf

This proposed rule is identified by PS Docket No. 23-239; FCC 23-65. The Docket Folder is available on the FCC's website at https://www.fcc.gov/edocs/search-results?t=quick&fccdaNo=23-65&dockets=23-239 and provides access to associated documents as well as comments received (if any). Documents are also accessible from the FCC's Electronic Document Management System (EDOCS) by searching the PS Docket Number. Comments are due on or before 25 September 2023; reply comments are due on or before 10 October 2023. WTO Members and their stakeholders are asked to submit comments to the USA TBT Enquiry Point by or before 4pm Eastern Time on 10 October 2023. Comments received by the USA TBT Enquiry Point from WTO Members and their stakeholders will be shared with the regulator and will also be submitted to the FCC Electronic Comment Filing System (ECFS) if received within the comment period.

9.

Proposed date of adoption: To be determined

Proposed date of entry into force: To be determined

10.

Final date for comments: 10 October 2023

11.

Texts available from: National enquiry point [ ] or address, telephone and fax numbers and email and website addresses, if available, of other body:

https://members.wto.org/crnattachments/2023/TBT/USA/23_12050_00_e.pdf

https://members.wto.org/crnattachments/2023/TBT/USA/23_12050_01_e.pdf