Secure by Design

The Government's Code of Practice for Consumer Internet of Things (IoT) Security for manufacturers, with guidance for consumers on smart devices at home.

The IoT represents a new chapter of how technology becomes more common in our homes, making people’s lives easier and more enjoyable. As people entrust an increasing amount of personal data to online devices and services, the cyber security of these products is now as important as the physical security of our homes.

The Government advocates for strong security to be built into internet-connected products by design. In October 2018, the Government published the Code of Practice for Consumer IoT Security to support all parties involved in the development, manufacturing and retail of consumer IoT.

Tech companies HP Inc., Centrica Hive Ltd and Green Energy Options (geo) Ltd are the first companies to sign up to commit to the Code and the Government encourages other manufacturers and retailers to follow suit. In addition, the Government also published consumer guidance - Smart Devices: How to use them safely to support people with setting up and managing their smart devices to keep their home and their information safe.


The Department for Digital, Culture, Media and Sport (DCMS) is consulting on regulatory proposals regarding consumer Internet of Things security. The consultation ran from 1 May 2019 to 5 June 2019.

For manufacturers and retailers

All you need to understand as a manufacturer or retailer about the government’s guidelines on making IoT devices safe and secure for consumers to use.

For consumers and consumer groups

Guidance for consumers on how they can help set up and manage their smart devices to improve their safety and protect their personal information.

Information on the Government’s work on developing a labelling scheme for household smart devices can be found in the Government response to the Secure by Design informal consultation (see Policy context, rationale and evidence section). The UK Government will be publishing its proposal for a labelling scheme for household smart devices in Spring 2019.

For assurance and accreditation scheme providers

Policy context, rationale and evidence

Read about the context behind the Government’s IoT policies.

Published 28 February 2019
Last updated 6 June 2019 + show all updates
  1. Added Pledges from industry to implement IoT Security Code of Practice.

  2. Added link to Government and tech industry collaborate to improve cyber security of IoT devices to the For manufacturers and retailers section.

  3. Added details of the consultation on the Government’s regulatory proposals regarding consumer Internet of Things (IoT) security.

  4. First published.