A new cybersecurity law in the United Kingdom is putting pressure on Apple and other smart device makers to ramp up their security measures or face hefty penalties. The Product Security and Telecommunications Infrastructure (PSTI) Act mandates that all internet-connected smart devices must meet minimum security standards to protect consumers from hackers and cyber criminals.
Under the new law, manufacturers must eliminate default passwords, establish a clear protocol for reporting security vulnerabilities, and provide detailed information to consumers about product support and software updates. Failure to comply could result in fines of up to £10 million ($12.5 million USD) or 4% of the company’s global turnover.
Apple, known for its strong security measures, will need to review how its devices align with the enhanced requirements. While Apple devices do not use default passwords, the company will need to communicate clearly with UK customers about the duration of security support. Retail stores will also be required to inform customers about cybersecurity practices related to their purchases.
The UK is the first country to introduce such stringent laws, aiming to prevent cyber attacks like the Mirai incident in 2016, which compromised 300,000 smart products and disrupted internet services in the US East Coast. Similar attacks have targeted UK banks, causing disruptions for customers. It’s clear that cybersecurity is a top priority for the UK government, and companies must step up their game to protect consumers from online threats.