UK's new 'world first' laws crack down on smart gadget cyber attacks

Representational image. Pic/iStock

The UK government's new legislation require all internet-connected smart devices to meet minimal security standards beginning on Monday. These steps are designed to safeguard consumers and organisations against hacking and cyber-attacks.

Manufacturers will be barred from using easily guessable default passwords such as "admin" or "12345". If a common password is discovered, users will be requested to change it when they set up the device, reported PTI.

According to the report, Which?, a UK house with smart gadgets might face more than 12,000 hacking attempts in a single week. The new legislation are intended to provide consumers better peace of mind regarding the security of their devices.

Viscount Camrose Jonathan Berry, UK Minister for Cyber, described the rules as "world first" and emphasised their importance in protecting personal privacy, data, and funds, the report added.

"From today, consumers will have greater peace of mind that their smart devices are protected from cyber criminals, as we introduce world first laws that will make sure their personal privacy, data and finances are safe," said UK Minister for Cyber Viscount Camrose, Jonathan Berry.

Manufacturers must ensure that equipment with internet or network access, such as cellphones and connected fridges, are safeguarded from hackers and cybercriminals under the new law.

The laws are part of the UK government's GBP 2.6 billion National Cyber Strategy, which aims to safeguard and promote Britain online. UK Data and Digital Infrastructure Minister Julia Lopez emphasised the country's commitment to being a global leader in online safety, the PTI report further stated.

"Our pledge to establish the UK as the global standard for online safety takes a big step forward with these regulations, moving us closer to our goal of a digitally secure future," said UK Data and Digital Infrastructure Minister Julia Lopez.

The regulations, which are part of the Product Security and Telecommunications Infrastructure regime, aim to strengthen the UK's resilience to cyberattacks while also protecting the economy from malicious influence.

In addition to password security, manufacturers will be required to offer contact information for reporting bugs and vulnerabilities, and retailers must educate customers about the estimated period for security updates.