The Federal Communications Commission (FCC) recently announced that the Internet of Things (IoT) cybersecurity labeling rules will officially take effect on August 29, 2024, with a compliance date of September 9, 2024. This rule aims to enhance the security of IoT devices, prevent network attacks and data breaches. The FCC has also strengthened its requirements for telecommunications certification agencies and measurement facilities, no longer authorizing testing laboratories that hold 10% or more of the shares and are included in the US "Entity List" to conduct FCC certification work, and requiring the submission of information on shareholders holding 5% or more of the shares.
The FCC's move is supported by recommendations from the American Association for Accreditation of Laboratories (A2LA), which include having the FCC or government agencies responsible for evaluating laboratory ownership structures, restoring the process for accreditation agencies to directly update laboratory validity periods, and establishing transparent procedures for revoking accreditation and tiered sanctions.