EU to tighten cybersecurity of connected devices

(BRUSSELS) - The EU Council approved Thursday conclusions acknowledging increased use of consumer devices connected to the internet and the related new risks for privacy, information security and cybersecurity.

Connected devices, including machines, sensors and networks that make up the Internet of Things (IoT), will play a key role in further shaping Europe's digital future, and so will their security.

The conclusions set out priorities to address this crucial issue, and to boost the global competitiveness of the EU's IoT industry by ensuring the highest standards of resilience, safety and security.

The conclusions underline the importance of assessing the need for horizontal legislation in the long term to address all relevant aspects of the cybersecurity of connected devices, such as availability, integrity and confidentiality. This would include specifying the necessary conditions for placement on the market.

Cybersecurity certification as defined under the Cybersecurity Act will be essential for raising the level of security within the digital single market. The EU Agency for Cybersecurity ENISA is already working on cybersecurity certification schemes, and the conclusions invite the Commission to consider a request for candidate cybersecurity certification schemes for connected devices and related services.

The Council adopted the conclusions by written procedure.

Council conclusions on the cybersecurity of connected devices

Cybersecurity in Europe: stronger rules and better protection (background information)