3 regulations recorded for the USA in the panorama of IoT cyber security regulations, which compares every country that regulates the cyber security of connected products.
Cybersecurity Improvement Act
H.R. 1668 - IoT Cybersecurity Improvement Act of 2020
| Question | Answer |
|---|---|
| Is the regulation in force? | Yes |
| Scope | All IoT devices and systems |
| Who must follow the regulation? | Federal agencies owning or controlling IoT devices and systems |
| Mandatory or Voluntary? | Mandatory |
| Is there a label or a certification? | No |
| Does the regulation mandate baseline security requirements? | Yes |
| Are there additional requirements to the baseline security? | Yes |
| Does the regulation contains assurance levels? | No |
| Is compliance with ETSI EN 303 645 a requirement? | No |
| Can ETSI EN 303 645 be used to comply with the regulation? | Partially |
| Are other standards or guidance referenced? (cf. regulation) | No |
California: SB-327 (California)
Senate Bill No. 327 - Information privacy: connected devices
| Question | Answer |
|---|---|
| Is the regulation in force? | Yes |
| Scope | Consumer IoT |
| Who must follow the regulation? | IoT manufacturers |
| Mandatory or Voluntary? | Mandatory |
| Is there a label or a certification? | No |
| Does the regulation mandate baseline security requirements? | Yes |
| Are there additional requirements to the baseline security? | No |
| Does the regulation contains assurance levels? | No |
| Is compliance with ETSI EN 303 645 a requirement? | No |
| Can ETSI EN 303 645 be used to comply with the regulation? | Yes |
| Are other standards or guidance referenced? (cf. regulation) | No |
Oregon: HB 2395 (Oregon)
House Bill 2395
| Question | Answer |
|---|---|
| Is the regulation in force? | Yes |
| Scope | Consumer IoT |
| Who must follow the regulation? | IoT manufacturers |
| Mandatory or Voluntary? | Mandatory |
| Is there a label or a certification? | No |
| Does the regulation mandate baseline security requirements? | Yes |
| Are there additional requirements to the baseline security? | No |
| Does the regulation contains assurance levels? | No |
| Is compliance with ETSI EN 303 645 a requirement? | No |
| Can ETSI EN 303 645 be used to comply with the regulation? | Yes |
| Are other standards or guidance referenced? (cf. regulation) | No |
Every other country
Australia
Brazil
Canada
China
Egypt
European Union
Hungary
India
Japan
Kingdom of Saudi Arabia
Oman
Singapore
South Korea
Switzerland
Thailand
United Arab Emirates
United Kingdom
Vietnam
Licence: Free to use for non-commercial purposes. Any use must credit cetome and link to cetome.com/panorama. The data is also open on GitHub.