A New Era of Product Cybersecurity: Navigating Regulatory Developments in 2024-2025

A New Era of Product Cybersecurity – Navigating Regulatory Developments in 2024-2025: Whitepaper Overview

The product cybersecurity landscape is undergoing a rapid transformation, driven by evolving threats and increasingly stringent regulatory requirements across major global markets. This whitepaper examines the evolving regulatory landscape of product cybersecurity across several key jurisdictions: Australia, the EU, Indonesia, China, the US, and Japan.

The primary focus is on products with network connectivity – including hardware, software, their components, and integral solutions – that can connect to a network like the internet or other devices for data exchange. This analysis will delve into key mandatory legislations that have been proposed, enacted, and taken effect in 2024 and the first two quarters of 2025.

Additionally, the whitepaper will explore voluntary schemes that promote cybersecurity labeling and certification as a means to enhance product security.

This Whitepaper Covers:

• Key Product Cybersecurity Legislation in:
  • Australia
  • European Union
  • Indonesia
  • China
• Voluntary Labeling and Certification Schemes, including:
  • EU: European Common Criteria-based Cybersecurity Certification Scheme (EUCC)
  • US: Cybersecurity Labeling for Internet of Things Program (US Cyber Trust Mark)
  • Japan: Labeling Scheme based on Japan Cyber-Security Technical Assessment Requirements (Japan Cyber STAR / JC-STAR)

*This whitepaper was originally published on 12th May, 2025. Further regulatory developments may have occurred after publication. To keep up-to-date with the latest compliance news, sign up to our newsletter.

Authors

Giselle Chia, Regulatory Compliance Analyst, Compliance & Risks

Giselle is a Regulatory Compliance Analyst at Compliance & Risks. Since joining in 2023, she is responsible for monitoring the regulatory developments in Taiwan and ASEAN countries. She assists clients with their global compliance challenges with particular focus in the areas of Cybersecurity, Ecolabeling, Transport of Dangerous Goods and Construction Products.

Giselle holds a Honors Bachelor of Laws (LL.B.) and a Barrister-at-Law Degree from the Honorable Society of King’s Inns, Ireland. She is a Mandarin native speaker who also speaks fluent English, Bahasa Malaysia/Indonesia and Cantonese.