UK Brings In New Laws To Protect Consumers And Bans Simple Passwords

In a world full of cybercrime and cyber-attacks, cybersecurity is a vital process that requires the attention of both consumers and manufacturers or service providers.

With the widescale adoption of artificial intelligence (AI), cybercriminals are even more empowered in their malicious activities.

However, the UK Government wants to change that with their latest announcement that introduces a new set of laws.

So, what changes are the government bringing in? Let’s explore!
 

What Did The UK Government Announce?

 

• As per a news release published on its website, the UK Government announced it was enforcing laws designed to protect consumers from hacking and cyber-attacks.

• The move is a part of the UK’s Product Security and Telecommunications Infrastructure (PSTI) regime, an initiative to improve the country’s resilience from cyber-attacks and ensure they don’t disrupt the UK and global economy.

• The move will require all internet-connected smart devices to meet minimum security standards.

• “Manufacturers will be legally required to protect consumers from hackers and cyber criminals from accessing devices with internet or network connectivity - from smartphones to games consoles and connected fridges - as the UK becomes the first country in the world to introduce these laws.”

• This includes manufacturers being banned from using weak and easy to guess passwords such as “admin” or “12345”. This includes cases where such passwords are used as default.

• In case such passwords are used, manufacturers must ensure that users will be required to change it on startup.

• As per a report, the most common passwords across the UK include, 123456, password, qwerty, liverpool, 123456789, arsenal, 12345678, 12345, abc123 and Chelsea.

• The move comes as the government looks to avoid threats like the Mirai attack in 2016, which witnessed over 300,000 smart devices being compromised due to weak security features and leaving a large chunk of the US East Coast without internet. Similar attacks were even seen in the UK.

• The release notes that recent figures find that 99% of UK adults own at least one smart device, with the average UK household owning nine connected devices. Furthermore, homes consisting of smart devices could be exposed to over 12,000 hacking attacks from around the world in a single week.

• The move will also include a series of improved security protections, such as manufacturers being required to publish contact details for bugs and issues reporting, as well as conveying the minimum time important security updates would take to be received.

• As per the release, “This new regime intends to increase consumer confidence in the security of the products they buy and use, delivering on one of the government’s five priorities to grow the economy. The new laws are part of the government’s £2.6 billion National Cyber Strategy to protect and promote the UK online.”

 

What Did UK Government Officials Say?

 

• Viscount Camrose, Minister for Cyber, said, “As every-day life becomes increasingly dependent on connected devices, the threats generated by the internet multiply and become even greater.”

• [Contd.] “From today, consumers will have greater peace of mind that their smart devices are protected from cyber criminals, as we introduce world first laws that will make sure their personal privacy, data and finances are safe.”

• [Contd.] “We are committed to making the UK the safest place in the world to be online and these new regulations mark a significant leap towards a more secure digital world.”

• Julia Lopez, Data and Digital Infrastructure Minister, said, “Today marks a new era where consumers can have greater confidence that their smart devices, such as phones and broadband routers, are shielded from cyber threats, and the integrity of personal privacy, data and finances better protected.”

• [Contd.] “Our pledge to establish the UK as the global standard for online safety takes a big step forward with these regulations, moving us closer to our goal of a digitally secure future.”

Do you think other countries should implement similar laws to protect consumer privacy? Do you think device manufacturers should consider such measures regardless of federal laws?

Let us know in the comments below!