[Free tools](/free-tools)/[United Kingdom](/free-tools/uk)/PSTI checker

🇬🇧Free tool · UK

# Is your connected product in scope of the UK PSTI Act?

Three questions tell you whether the UK's connected-product security law applies, and exactly what it requires.

Can the product connect to the internet, or to another device that connects to the internet (Wi-Fi, Bluetooth, Ethernet, a hub or app)?

YesNo

CheckFree · no sign-up · result you can share

## How this works

The UK's PSTI regime makes three baseline security requirements mandatory for consumer connectable products: no universal default passwords, a way to report vulnerabilities, and transparency about how long security updates will be provided. It has applied since 29 April 2024 and covers products sold anywhere in the UK.

It applies to smart TVs, speakers, cameras, wearables, connected appliances, routers, phones and similar — anything consumers can connect to the internet or to a device that is. A few product types regulated elsewhere, such as medical devices and smart meters, are excluded.

## Questions

### Does PSTI apply to Bluetooth-only products?

Yes, if the product connects to something that is itself internet-connectable, such as a phone. It's 'network-connectable' in that case.

### Who has to comply — the manufacturer or the retailer?

Manufacturers must meet the requirements; importers and distributors have duties to check compliance and not sell non-compliant products.

### Is PSTI the same as the EU's RED cybersecurity rules?

No. They overlap in spirit but are separate laws with different requirements and evidence. A product sold in both markets needs both.

## Related guides

*   [UK PSTI Act: Mandatory Security Requirements for Consumer Connectable Products](/guides/uk-psti-act-connected-products)

Regulatory information based on your answers and the sources listed, not legal advice. Krono is not a notified body, test lab or law firm; you remain responsible for your product's compliance.