Section 2: Further provision about regulations under section 1, Product Security and Telecommunications Infrastructure Act 2022

A security requirement may relate to (among other things) all the relevant connectable products of—

a relevant person, or

a relevant person of a particular description.

For the purposes of subsection (1), the relevant connectable products of a relevant person are—

in the case of a person who is a manufacturer, any relevant connectable products in respect of which the person is a manufacturer;

in the case of a person who is an importer, any relevant connectable products in respect of which the person is an importer;

in the case of a person who is a distributor, any relevant connectable products in respect of which the person is a distributor.

A security requirement may be described by reference to (among other things)—

any software used for the purposes of, or in connection with, the operation of a relevant connectable product;

any software used by a person in the course of, or in connection with, using a relevant connectable product;

any software used for the purposes of providing a service to a person by means of a relevant connectable product;

and for these purposes it does not matter whether the software is installed on the product or whether the software or service is provided by a manufacturer of the product.

A security requirement may (among other things) require a relevant person to do something in relation to a relevant connectable product, including in relation to times after a relevant connectable product has been made available in the United Kingdom.

Regulations under section 1 are subject to the negative resolution procedure if the only provision they make under that section is provision—

varying any description of—

products to which a security requirement relates, or

software by reference to which a security requirement is described, or

otherwise altering any term used in describing a security requirement without altering the effect of the security requirement or the extent to which it applies in any case.

Except as provided by subsection (5), regulations under section 1 are subject to the affirmative resolution procedure.

Section 2: Further provision about regulations under section 1

Discussed in

About this text