Direct answer: A Wi-Fi or network-connected humidifier, fan or diffuser offered to UK consumers may fall within the UK consumer connectable product security regime. Manufacturers, importers and distributors should determine scope and ensure the required security controls and Statement of Compliance are in place before supply.
Imported official government record
Official source facts
- Authority
- UK Department for Science, Innovation and Technology
- Official document
- Product Security and Telecommunications Infrastructure (PSTI) regime
- Date / status
- In force from 29 April 2024
- Applies to
- UK consumer connectable products, including relevant app-connected appliances
- Manufacturers, importers and distributors have duties for relevant connectable products supplied to UK consumers.
- Universal or easily guessed default passwords are not permitted under the baseline requirements.
- Manufacturers must publish a vulnerability reporting contact and state the minimum security update period.
- A Statement of Compliance must accompany the product as required by the regime.
Verify the current official source
Official material imported as an original English editorial summary by MistAirHome on 26 October 2026. Confirm the latest rule, standard and product scope at the primary source before purchase or shipment.
What changed in the United Kingdom
The UK Product Security and Telecommunications Infrastructure framework came into force for relevant consumer connectable products on 29 April 2024. Official guidance identifies duties covering manufacturers, importers and distributors and explains the need for a Statement of Compliance.
Three controls that affect product development
- Passwords: products should not rely on universal or easily guessable default passwords.
- Vulnerability reporting: the manufacturer needs a public route for security researchers and users to report vulnerabilities.
- Security-update transparency: users must be told the minimum period for which security updates will be provided.
How this changes an OEM brief
A smart-product brief should identify the wireless chipset, application, cloud platform, account system, default onboarding process, update method and support period. The packaging and user documentation must be aligned with the final hardware and software build. A non-connected version and a connected version should not share compliance wording unless both have been separately reviewed.
MistAirHome sourcing note
For UK projects, buyers should state whether app control, Wi-Fi, Bluetooth, voice-assistant integration or cloud functions are required. MistAirHome will treat cybersecurity documentation and the Statement of Compliance as model-specific deliverables rather than generic marketing claims.
Sources and verification record
- GOV.UK — regulations for consumer connectable product security
- UK legislation — Product Security and Telecommunications Infrastructure Act 2022
Editorial review: 26 October 2026. This article summarizes the linked primary sources. It is not legal, medical or market-entry advice. Requirements and product coverage must be confirmed for the exact model, sales channel and destination.
Questions from buyers
Customer FAQ
Does every humidifier or fan need to meet the UK PSTI rules?
PSTI focuses on relevant consumer connectable products. A non-connected model may fall outside this regime, while a Wi-Fi, Bluetooth or app-connected model may be in scope. Confirm the final functions and legal classification before ordering.
What PSTI documents should a UK importer ask for?
For an in-scope model, ask for the Statement of Compliance, password design information, vulnerability-reporting contact, declared security-update period and supporting technical records for the exact product version.
Can the security-update period be customized for an OEM model?
It must be agreed during product definition because software ownership, app platform and support responsibility affect the declared period. MistAirHome can document the agreed arrangement in the final specification and quotation.
Source review record
Last reviewed: 26 October 2026
- The named government or standards-body source was checked, key facts were independently paraphrased, and the official verification link was retained.
- Added decision-focused buyer FAQs and links to related market and product research.
- Confirmed that specifications, certification scope, pricing, packaging and lead time remain subject to the selected model and final written quotation.
Review owner: MistAirHome Editorial Team
