Export Compliance Daily is a Warren News publication.

FCC Proposed Rule Would Create Voluntary Labeling for IoT Goods

The Federal Communications Commission is proposing a "voluntary cybersecurity labeling program" for Internet of Things (IoT) devices that would provide "easily understood" and "accessible information" to consumers about the security of their IoT devices, the agency said.

Sign up for a free preview to unlock the rest of this article

Export Compliance Daily combines U.S. export control news, foreign border import regulation and policy developments into a single daily information service that reliably informs its trade professional readers about important current issues affecting their operations.

The proposed rule, published in the Federal Register Aug. 25, also would "assure" consumers that their devices meet the FCC's standards for cybersecurity, the proposed rule said. Comments on the proposed rule are due by Sept. 25, and replies to the comments are due by Oct. 10.

The proposal would create a new "distinctive trademark" that would be a part of their voluntary labeling program. The FCC also wants to involve third parties in the process, including using third parties to help create standards to be considered by the FCC. The FCC also wants third parties to "evaluate and authorize" the use of the FCC's trademark on an IoT product, the proposed rule said.

The proposed labeling program was previously released earlier in August as a way to "provide consumers with the peace of mind that the technology being brought into their homes is reasonably secure." FCC Chairwoman Jessica Rosenworcel referred to the trademark as the "U.S. Cyber Trust Mark," in a statement in July. Rosenworcel described this proposal as an opportunity for the FCC to "ensure that every consumer, business, and every bank with a vending machine can make smart choices about the connected devices they use."

"In this regard, the Commission's cybersecurity labeling program would help consumers compare IoT devices and make informed purchasing decisions, drive consumers toward purchasing devices with greater security, incentivize manufacturers to meet higher cybersecurity standards to meet market demand, and encourage retailers to market secure devices," the proposed rule said.