On 4 March 2025, Australia officially enacted the Smart Device Security Standards Rules 2025 as implementing rules under its 2024 Cybersecurity Act. The regulation provides a one-year transition period for manufacturers and distributors to comply, with the deadline set for 4 March 2026.
Ti Group’s Electronics & Appliances Service Division has completed full testing capability alignment with the new rules, empowering businesses to achieve seamless compliance and secure market access in Australia.
Scope of Affected Products
Consumer-grade products capable of direct or indirect internet connectivity, including:Smart cameras,Smart speakers,Connected home appliances,Wearable devices
,IoT hubs,Alarm systems.etc
Core Security Requirements
Ban on Universal Default Passwords
Devices must not use preset generic passwords (e.g., “admin” or “12345”). Users must set unique credentials during initial activation.
Mandatory Vulnerability Reporting Mechanism
Manufacturers must establish publicly accessible channels for security vulnerability disclosures, ensuring timely responses and remediation.
Defined Security Update Support Periods
Manufacturers must provide security updates throughout the product lifecycle and specify the support duration in compliance declarations.
Compliance Benefits
Market Access: Legally sell products in Australia with mitigated regulatory risks.
Consumer Trust: Compliance marks and transparent information disclosures enhance brand credibility and competitiveness.
Risk Reduction: Proactive vulnerability management and updates minimize attack vectors, safeguarding user privacy and data security.
Global Alignment: Harmonized with international standards (e.g., EU regulations), streamlining multi-country certification.