PSTI Act

The Product Security and Telecommunications Infrastructure (PSTI) Act 2022 is a cybersecurity statute enacted by the UK government for internet-connected hardware. It mandates that all connected devices sold in the UK meet binding cybersecurity rules to shield end users from cyber threats. PSTI compliance applies to all connected products, including smart home hardware, wearables, connected household appliances, data loggers and energy management systems. The Act obliges manufacturers to deploy device-specific unique passwords, formal vulnerability disclosure policies and sustained security update commitments to lower risks of cyberattacks and data breaches. Products meeting PSTI rules comply with UK cybersecurity law and may be legally marketed across the UK. Compliance verification covers device password controls, security update capabilities and vulnerability management workflows, aligned with criteria such as ETSI EN 303645 and UK test specification PPP 17013A:2023. Following PSTI rules helps manufacturers maintain regulatory compliance and avoid market restrictions and fines stemming from UK regulatory violations. Sungrow products have completed the assessment required under the UK PSTI regime and a Statement of Compliance (SoC) is available for the applicable products. Should you require the detailed report, please contact our sales team.