Updated December 12, 2024. Originally Posted December 10, 2024.

On December 4, 2024, the Federal Communications Commission (the “Commission”) announced that it had selected UL Solutions to serve as the Lead Administrator for its Internet of Things Cybersecurity Labeling Program (the “IoT Labeling Program”).  The Commission also conditionally approved UL Solutions as a Cybersecurity Label Administrator (“CLA”) for the IoT Labeling Program.  On December 11, 2024, the Commission announced 10 additional conditionally approved CLAs.  As we have previously covered, the IoT Labeling Program is intended to provide consumers with a recognizable label, which includes the U.S. Cyber Trust Mark, indicating that the product complies with the Commission rules for the IoT Labeling Program.

As Lead Administrator, UL Solutions will be tasked with providing the Commission with recommendations for IoT standards and testing procedures for the IoT Labeling Program and other responsibilities.  UL Solutions will lead a stakeholder engagement process to inform these recommendations and will provide initial recommendations to the Commission within 90 days of their announcement as Lead Administrator. 

Once approved, the CLAs will be responsible for certifying the use of the IoT Labeling Program label by manufacturers whose products comply with the IoT Labeling Program’s Rules.  They will also participate in the stakeholder engagement process mentioned above, among other responsibilities. The Commission noted that approval for CLAs, including UL Solutions, is conditioned upon satisfying a number of requirements, including obtaining accreditation with the International Organization for Standardization/International Electrotechnical Commission (ISO/IEC).

Looking ahead, industry will have the opportunity to participate in the stakeholder process identified above.