Cyber Security (Security Standards for Smart Devices) Rules 2025 (Cth)

Cyber Security (Security Standards for Smart Devices) Rules 2025 I, Tony Burke, Minister for Home Affairs, make the following rules.

Dated 27 February 2025

Tony Burke Minister for Home Affairs

Contents Part 1—Preliminary 1 Name 2 Commencement 3 Authority 4 Definitions Part 2—Security standards for smart devices Division 1—Preliminary 5 Simplified outline of this Part 6 Meaning of consumer Division 2—Security standards for relevant connectable products 7 Purpose of this Division 8 Security standards for consumer grade relevant connectable products Division 3—Statements of compliance 9 Requirements for statement of compliance 10 Retention period for statement of compliance Division 4—Notification of failure to comply with recall notice 11 Matters to be published with notification of failure to comply with recall notice Schedule 1—Security standards Part 1—Security standard for consumer grade relevant connectable products 1 Definitions 2 Requirements in relation to passwords 3 Requirements relating to reports of security issues 4 Requirements relating to defined support periods and security updates

Part 1—Preliminary

1 Name This instrument is the Cyber Security (Security Standards for Smart Devices) Rules 2025.

2 Commencement (1) Each provision of this instrument specified in column 1 of the table commences, or is taken to have commenced, in accordance with column 2 of the table. Any other statement in column 2 has effect according to its terms.

Commencement information Column 1 Column 2 Column 3 Provisions Commencement Date/Details 1. Part 1 and anything in this instrument not elsewhere covered by this table The day this instrument is registered. 4 March 2025 2. Part 2 and Schedule 1 The day after the end of the period of 12 months beginning on the day this instrument is registered. 4 March 2026