Australia's "Network Security (Smart Device Security Standard) Rules 2025" will come into effect on March 4, 2026. Smart devices that have not passed ACMA certification will be banned from import, and they will face high fines and market bans!
Core safety requirements of regulations
The new Australian regulations require manufacturers and distributors to comply with strict safety measures similar to EN 303 645, including:
1. It is forbidden to use the common default password to avoid the network security risks caused by password leakage from the source;
2. Establish and implement a sound vulnerability reporting mechanism to find and respond to product security vulnerabilities in a timely manner;
3. Clearly define the support period of product safety update to ensure the network security of the whole life cycle of equipment;
4. Issue a compliance statement as required as the official certificate that the product meets the safety standards.
Essential elements of compliance statement
If enterprises want to sell consumer IoT products in Australia, they must provide compliance statements as required to confirm that the products meet relevant safety standards. The compliance statement file shall contain the following information:
◆ Commodity type and batch code
◆ Details of manufacturers and representatives
◆ Declaration of conformity
◆ Defined support period
◆ The place and date of issuance of the compliance statement and the signature, name and position of the manufacturer's signatory.
Note: This compliance statement needs to be kept by the manufacturer for at least 5 years.
Scope of products applicable to the new regulations
The regulation was formulated by the Australian Ministry of the Interior in accordance with the Cyber Security Act of 2024, and is applicable to "consumer-related connectable products" that can be directly or indirectly connected to the Internet.
★ Typical products covered include:
◆ Webcam, intelligent door lock and alarm system.
◆ Smart home assistants and smart home appliances
◆ Wearable devices
◆ Intelligent lighting appliances, intelligent controllers, Internet of Things base stations, etc.
★ Exempted equipment includes:
◆ Desktop computer or notebook computer
◆ Tablet PC
◆ Smart phone
◆ Therapeutic products as defined in the Therapeutic Products Act of 1989.
◆ Road vehicles defined according to the Road Vehicle Standards Law of 2018.
◆ Road vehicle parts and components defined according to the Road Vehicle Standards Law of 2018.
Warm tips
The implementation of the new regulations in Australia is just around the corner. ZRLK suggests that enterprises that want to lay out the Australian consumer-grade smart device market should make certification plans in advance, sort out product safety design and production processes, improve supporting mechanisms such as vulnerability reporting and safety update, and prepare compliance statement documents as required to ensure that products complete all compliance certification processes before March 4, 2026, so as to avoid losing the Australian market due to substandard products. Our company has a professional technical team and rich experience in product testing, which can help enterprises enter the target market in compliance with regulations. If you need it, please feel free to contact us, and our engineers will serve you at the first time!
