On December 4, 2024, the Federal Communications Commission (the “Commission”) announced that it had selected UL Solutions to serve as the Lead Administrator for its Internet of Things Cybersecurity Labeling Program (the “IoT Labeling Program”). The Commission also conditionally approved UL Solutions as a Cybersecurity Label Administrator (“CLA”) for the IoT Labeling Program. As we have previously covered, the IoT Labeling Program is intended to provide consumers with a recognizable label, which includes the U.S. Cyber Trust Mark, indicating that the product complies with the Commission rules for the IoT Labeling Program.
As Lead Administrator, UL Solutions will be tasked with providing the Commission with recommendations for IoT standards and testing procedures for the IoT Labeling Program and other responsibilities. UL Solutions will lead a stakeholder engagement process to inform these recommendations and will provide initial recommendations to the Commission within 90 days of their announcement as Lead Administrator.
As a CLA, UL Solutions would be one of multiple entities to certify the use of the IoT Labeling Program label by manufacturers whose products comply with the IoT Labeling Program’s Rules. The Commission noted that approval for CLAs, including UL Solutions, is conditioned upon satisfying a number of requirements, including obtaining accreditation with the International Organization for Standardization/International Electrotechnical Commission (ISO/IEC).
Looking ahead, industry will have the opportunity to participate in the stakeholder process identified above and the Commission will likely announce additional CLAs.