IoT Cyber Security

With effect from March 2026, connected devices intended for sale in Australia must adhere to the rules outlined in Cyber Security (Security Standards for Smart Devices) Rules 2025. A basic framework has been set to ensure IoT (Internet-of-Things) devices are secure and customers receive clear communication regarding security issues, support periods, and product updates.

If your product connects to the internet, or connects to multiple products (including an internet connected device), you must meet the requirements of the Rules.

  1. If using a password, the mechanisms for default passwords must be secure and not easily guessable
  2. You must publish information on how consumers can report security issues
  3. You must publish information on the support period for your product
  4. You must have a Declaration of Compliance

Relationship to the European Rules

The Australian Cyber Security (Security Standards for Smart Devices) Rules 2025 are based in part on the European standard ETSI EN 303 645. If your product has been tested to this standard or to EN 18031-1, it is likely it already meets the Australian requirements for passwords.

You will still need to meet the other three requirements.

Are there exemptions?

While all internet connected consumer-grade products must adhere to the rules, there are some that are exempt due to complexity or existing rules, including:

  • Medical technology covered by the Therapeutic Goods Act 1989
  • Vehicles covered by the Road Vehicle Standards Act 2018
  • Automotive components covered by the Road Vehicle Standards Act 2018 (i.e. equipment with an Australian Design Rule)
  • Desktop and laptop computers
  • Tablet computers and smartphones
  • Many cables and products designed for linking smart devices

How can Comtest help?

At Comtest, we can assess your product to EN 303 645 and the Australian rules, and help prepare your Declaration of Compliance. If you’re uncertain, we can assist you in navigating the compliance pathways so you can get your product to market without delay. Contact us today to find out more.