Memorandum Signed on Mutual Recognition of Labeling Scheme based on Japan Cyber-Security Technical Assessment Requirements (JC-STAR) and the UK Product Security and Telecommunications Infrastructure (PSTI) Act

1. Outline

In Japan, based on the “IoT Product Security Conformity Assessment Scheme Policy” published by METI in August 2024, the Information-technology Promotion Agency, Japan (IPA), an independent administrative institution, began operating the “Labeling Scheme based on Japan Cyber-Security Technical Assessment Requirements (JC-STAR)” in March 2025.

On November 5, 2025, Mr. Takeo Nobutaka, Director, Cybersecurity Division, Commerce and Information Policy Bureau of METI, Japan, and Mr. Rod Latham, Director for Cyber Security and Digital Identity, Department for Science, Innovation and Technology (DSIT), the UK, signed a Memorandum of Cooperation between the Ministry of Economy, Trade and Industry of Japan and the Department for Science, Innovation and Technology of the United Kingdom on Mutual Recognition of IoT Security Frameworks (hereinafter referred to as the Document).

The Document was released in light of the intention of both Japan and the UK to advance cooperation in the field of cybersecurity. Based on this memorandum, from January 1, 2026, products that have been awarded JC-STAR Level 1 will also be deemed to comply with the technical standards (three requirements: 1. Passwords, 2. Information on how to report security issues, and 3. Information on minimum security update periods) required by the UK PSTI Act (Product Security and Telecommunications Infrastructure Act). The specific methods and procedures for manufacturers to prove compliance will be decided in consultation with the UK government and will be published on the IPA website once decided. This is expected to improve cybersecurity measures for IoT products in both countries and reduce the burden on manufacturers.

2. Future initiatives

Japan will continue to advance policy initiatives aimed at building a system that will enable the widespread use of IoT products that incorporate appropriate security measures, and will also promote information sharing with various relevant organizations with the aim of achieving mutual recognition with other countries that have similar systems, including the UK's DSIT.

Related Material

• MEMORANDUM of COOPERATION BETWEEN THE MINISTRY OF ECONOMY, TRADE, AND INDUSTRY OF JAPAN AND THE DEPARTMENT FOR SCIENCE, INNNOVATION AND TECHNOLOGY OF THE UNITED KINGDOM ON MUTUAL RECOGNITION OF IOT SECURITY REGIMES(PDF:121KB)

Related Links

• Labeling Scheme based on Japan Cyber-Security Technical Assessment Requirements (JC-STAR)
• Product Security and Telecommunications Infrastructure Act 2022

Division in Charge

Cybersecurity Division, Commerce and Information Policy Bureau