Product Security and Telecommunications Infrastructure Act 2022
The Secretary of State may by regulations specify requirements (“security requirements”) for the purpose of protecting or enhancing the security of—
relevant connectable products made available to consumers in the United Kingdom;
users of such products.
A security requirement is a requirement that— In this subsection “specified” means specified in the regulations.
relates to relevant connectable products, or relevant connectable products of a specified description, and
applies to relevant persons, or relevant persons of a specified description.
See— section 4, for the meaning of “relevant connectable product”; section 7, for the meaning of “relevant person”.
For provision imposing duties on relevant persons to comply with security requirements, see sections 8, 14 and 21.
Section 2 contains further provision about regulations under this section.
A security requirement may relate to (among other things) all the relevant connectable products of—
a relevant person, or
a relevant person of a particular description.
For the purposes of subsection (1), the relevant connectable products of a relevant person are—
in the case of a person who is a manufacturer, any relevant connectable products in respect of which the person is a manufacturer;
in the case of a person who is an importer, any relevant connectable products in respect of which the person is an importer;
in the case of a person who is a distributor, any relevant connectable products in respect of which the person is a distributor.
A security requirement may be described by reference to (among other things)— and for these purposes it does not matter whether the software is installed on the product or whether the software or service is provided by a manufacturer of the product.
any software used for the purposes of, or in connection with, the operation of a relevant connectable product;
any software used by a person in the course of, or in connection with, using a relevant connectable product;
any software used for the purposes of providing a service to a person by means of a relevant connectable product;
A security requirement may (among other things) require a relevant person to do something in relation to a relevant connectable product, including in relation to times after a relevant connectable product has been made available in the United Kingdom.
Regulations under section 1 are subject to the negative resolution procedure if the only provision they make under that section is provision—
varying any description of—
products to which a security requirement relates, or
software by reference to which a security requirement is described, or
otherwise altering any term used in describing a security requirement without altering the effect of the security requirement or the extent to which it applies in any case.
Except as provided by subsection (5), regulations under section 1 are subject to the affirmative resolution procedure.
The Secretary of State may by regulations provide that a relevant person is to be treated as having complied with a security requirement relating to a relevant connectable product if specified conditions are met.
The conditions that may be specified under subsection (1) include, among other things, the following— and the standards that may be specified include standards set by a person or body outside the United Kingdom.
that the product conforms to a specified standard;
that the relevant person otherwise meets any requirements imposed by a specified standard;
Regulations under subsection (1) are subject to the affirmative resolution procedure.
In this section “specified” means specified in the regulations.
In this Part “relevant connectable product” means a product that meets conditions A and B.
Condition A is that the product is— (For the meaning of these terms, see section 5.)
an internet-connectable product, or
a network-connectable product.
Condition B is that the product is not an excepted product (see section 6).
an agreement for the hiring of a product (other than a hire-purchase agreement).
In this Part “internet-connectable product” means a product that is capable of connecting to the internet.
The reference in subsection (1) to connecting to the internet is a reference to using a communication protocol that forms part of the Internet Protocol suite to send and receive data over the internet.
“specified” means specified in the recall notice.
In this Part “network-connectable product” means a product that—
is capable of both sending and receiving data by means of a transmission involving electrical or electromagnetic energy,
is not an internet-connectable product, and
meets the first connectability condition (see subsection (4)) or the second connectability condition (see subsection (5)).
A product meets the first connectability condition if it is capable of connecting directly to an internet-connectable product by means of a communication protocol that forms part of the Internet Protocol suite.
A product meets the second connectability condition if—
it is capable of connecting directly to two or more products at the same time by means of a communication protocol that does not form part of the Internet Protocol suite, and
it is capable of connecting directly to an internet-connectable product by means of such a communication protocol (whether or not at the same time as it connects to any other product).
In determining whether the condition in subsection (5)(a) is met in relation to a product (“the relevant product”), any product consisting of a wire or cable that is used merely to connect the relevant product to another product is to be disregarded.
In a case where— each of the input products is to be treated for the purposes of subsection (3) as meeting the second connectability condition.
two or more products are designed to be used together for the purposes of facilitating the use of a computer,
at least one of the products (the “linking product”) is capable of connecting directly to an internet-connectable product (whether the computer or some other product) by means of a communication protocol that does not form part of the Internet Protocol suite, and
each of the products that is not a linking product (“the input products”) is capable of connecting directly to the linking product, or (where there is more than one linking product) to each linking product—
wirelessly, and
by means of a communication protocol that does not form part of the Internet Protocol suite,
For the purposes of subsections (4) to (7), a product is not to be prevented from being regarded as connecting directly to another product merely because the connection involves the use of a wire or cable.
In this Part “excepted product” means a product of a description specified in regulations made by the Secretary of State.
The provision that may be made by regulations under this section includes, among other things—
provision as to whether, in a case where a product (“the secondary product”) is incorporated into or attached to, or otherwise forms part of, another product (“the primary product”), the primary product is, or is not, to be regarded as an excepted product;
provision as to whether, in such a case, the secondary product is, or is not, to be regarded as an excepted product.
Regulations under this section are subject to the negative resolution procedure if the only provision they make under this section is provision—
varying any description of product specified in regulations under this section, or
specifying any description of product in relation to which requirements relating to security that, in the opinion of the Secretary of State, are equivalent to those specified under this Part will apply.
Except as provided by subsection (3), regulations under this section are subject to the affirmative resolution procedure.
This section has effect for the purposes of this Part.
“Relevant person”, in relation to a relevant connectable product, means any of the following—
a manufacturer of the product (see subsection (3));
an importer of the product (see subsection (4));
a distributor of the product (see subsection (5)).
“Manufacturer” means any of the following—
any person who—
manufactures a product, or has a product designed or manufactured, and
markets that product under that person’s name or trade mark;
any person (“P”) who markets a product manufactured by another person under P’s name or trade mark.
“Importer”, in relation to a product, means any person who—
imports the product from a country outside the United Kingdom into the United Kingdom, and
is not a manufacturer of the product.
“Distributor”, in relation to a product, means any person who—
makes the product available in the United Kingdom, and
is not a manufacturer or an importer of the product.
But a person is not to be regarded as a distributor of a product if—
the person makes the product available by performing a contract for the carrying out of works that consist of or include the installation of the product into a building or structure, and
products identical to the product are or have been made available to consumers in the United Kingdom otherwise than by the performance of such a contract.
A manufacturer of a relevant connectable product must comply with any relevant security requirements relating to the product if condition A or B is met.
Condition A is that the manufacturer—
intends the product to be a UK consumer connectable product, or
is aware, or ought to be aware, that the product will be a UK consumer connectable product.
Condition B is that—
the product is a UK consumer connectable product, and
at the time it was made available by the manufacturer, condition A was met in relation to the product.
For the meaning of “UK consumer connectable product”, see section 54.
Subsection (2) applies if a manufacturer of a relevant connectable product—
intends the product to be a UK consumer connectable product, or
is aware, or ought to be aware, that the product will be a UK consumer connectable product.
The manufacturer may not make the product available in the United Kingdom unless it is accompanied by—
a statement of compliance, or
a summary of the statement of compliance that is in such form, and contains such information, as is specified in regulations made by the Secretary of State.
A “statement of compliance”, in relation to a product, is a document that—
is prepared by or on behalf of the manufacturer of the product,
is in such form, and contains such information, as is specified in regulations made by the Secretary of State, and
states that, in the opinion of the manufacturer, the manufacturer has complied with the applicable security requirements.
For the purposes of this section “the applicable security requirements”, in relation to a manufacturer of a product, means any relevant security requirements relating to the product, other than—
a security requirement that applies only after the product has been made available in the United Kingdom, or
a security requirement that applies only when the manufacturer is making the product available to customers in the United Kingdom.
In a case where there is more than one manufacturer in relation to a product—
it is sufficient for the purposes of subsection (3)(a) if the document is prepared by or on behalf of all of the manufacturers acting jointly, and
in such a case, any reference to the manufacturer in subsection (3)(c) is to be read as a reference to each of those manufacturers.
The Secretary of State may by regulations make further provision about statements of compliance, including (among other things)—
provision requiring a manufacturer of a product to take specified steps to determine for the purposes of preparing a statement of compliance whether the manufacturer has complied with the applicable security requirements;
provision requiring a manufacturer of a product to retain a copy of the statement of compliance relating to the product for a specified period;
provision about publishing statements of compliance;
provision about making available copies of statements of compliance.
The Secretary of State may by regulations provide that a manufacturer is to be treated as complying with subsection (2) if specified conditions are met.
In subsections (6) and (7) “specified” means specified in the regulations.
Regulations under subsection (7) are subject to the affirmative resolution procedure.
Other regulations under this section are subject to the negative resolution procedure.
This section applies if, at any time after a relevant connectable product has been made available in the United Kingdom—
a manufacturer of the product is informed that there is, or may be, a compliance failure in relation to the product, and
the manufacturer is aware, or ought to be aware, that the product is or will be a UK consumer connectable product.
The manufacturer must take all reasonable steps to investigate whether there is a compliance failure in relation to the product.
In this section “compliance failure” means a failure by a manufacturer of the product to comply with a relevant security requirement relating to the product.
This section applies if, at any time after a relevant connectable product has been made available in the United Kingdom—
a manufacturer of the product becomes aware, or ought to be aware, of a compliance failure in relation to the product, and
the manufacturer is aware, or ought to be aware, that the product is or will be a UK consumer connectable product.
The manufacturer must, as soon as is practicable, take all reasonable steps to—
prevent the product from being made available to customers in the United Kingdom (where it has not already been so made available);
remedy the compliance failure.
The manufacturer must notify the persons listed in subsection (4) of the compliance failure as soon as possible. This is subject to subsection (8).
The persons referred to in subsection (3) are—
the enforcement authority;
any other manufacturer of the product of which the manufacturer is aware;
any importer or distributor to whom the manufacturer supplied the product;
in a case where specified conditions are met, any customer in the United Kingdom to whom the manufacturer supplied the product.
In subsection (4)(d) “specified” means specified in regulations made by the Secretary of State. Regulations under this subsection are subject to the negative resolution procedure.
The notification under subsection (3) must include the following information—
details of the compliance failure;
any risks of which the manufacturer is aware that are posed by the compliance failure;
any steps taken by the manufacturer to remedy the compliance failure and whether or not those steps have been successful.
When the manufacturer notifies a person within subsection (4)(b) or (c) of the compliance failure, the manufacturer must also inform the person whether or not the manufacturer has notified the enforcement authority of the compliance failure.
Where the manufacturer became aware of the compliance failure as a result of being contacted about it by a relevant person in accordance with this Chapter, the manufacturer does not need to notify the relevant person of the compliance failure.
In this section “compliance failure” means a failure by a manufacturer of the product to comply with a relevant security requirement relating to the product.
A manufacturer of a relevant connectable product must maintain a record of—
any investigations carried out by the manufacturer in relation to a compliance failure or suspected compliance failure (whether or not as a result of information received as mentioned in section 10(1)(a));
any compliance failures relating to the product.
A record of an investigation must contain the following information—
the outcome of the investigation;
where the manufacturer determined that there was a compliance failure, details of that compliance failure;
any steps taken by the manufacturer to remedy the compliance failure and whether or not those steps were successful.
A record of a compliance failure must contain the following information—
details of the compliance failure;
any steps taken by the manufacturer to remedy the compliance failure and whether or not those steps were successful.
A record of an investigation or a compliance failure must be retained for a period of 10 years beginning with the day on which the record is made.
In a case where there is more than one manufacturer in relation to a product, the duty of each of those manufacturers to maintain a record under this section may be met by those manufacturers jointly maintaining a single record.
In this section “compliance failure” means a failure by a manufacturer of the product to comply with a relevant security requirement relating to the product.
This section applies if, at any time after a relevant connectable product is made available in the United Kingdom—
an authorised representative of a manufacturer of the product is informed that there is, or may be, a compliance failure in relation to the product, and
the authorised representative is aware, or ought to be aware, that the product is or will be a UK consumer connectable product.
The authorised representative must contact the manufacturer about the compliance failure (or potential compliance failure) as soon as possible.
The authorised representative must notify the enforcement authority of the compliance failure (or potential compliance failure) as soon as possible after the authorised representative has contacted (or attempted to contact) the manufacturer in accordance with subsection (2).
In this section “compliance failure” means a failure by a manufacturer of the product to comply with a relevant security requirement relating to the product.
An importer of a relevant connectable product must comply with any relevant security requirements relating to the product if condition A or B is met.
Condition A is that the importer—
intends the product to be a UK consumer connectable product, or
is aware, or ought to be aware, that the product will be a UK consumer connectable product.
Condition B is that—
the product is a UK consumer connectable product, and
at the time it was made available by the importer, condition A was met in relation to the product.
For the meaning of “UK consumer connectable product”, see section 54.
Subsection (2) applies if an importer of a relevant connectable product—
intends the product to be a UK consumer connectable product, or
is aware, or ought to be aware, that the product will be a UK consumer connectable product.
The importer may not make the product available in the United Kingdom unless it is accompanied by—
a statement of compliance, or
a summary of the statement of compliance prepared in accordance with section 9(2)(b).
The importer must retain a copy of the statement of compliance, or the summary of the statement of compliance (as the case may be), for a period specified in regulations made by the Secretary of State.
The Secretary of State may by regulations require an importer of a relevant connectable product to make available the statement of compliance relating to the product, or the summary of the statement of compliance (as the case may be), in accordance with provision made by the regulations.
In a case where regulations made under section 9(7) provide that a manufacturer of a relevant connectable product is to be treated as complying with section 9(2) if conditions specified in the regulations are met—
an importer of the product who meets the condition in subsection (1)(a) or the condition in subsection (1)(b) of this section may not make the product available in the United Kingdom unless the importer is satisfied that the conditions specified in the regulations have been met, and
subsections (2) and (3), and any regulations made under subsection (4), do not apply.
Regulations under this section are subject to the negative resolution procedure.
An importer of a relevant connectable product may not make the product available in the United Kingdom if—
the importer—
intends the product to be a UK consumer connectable product, or
is aware, or ought to be aware, that the product will be a UK consumer connectable product, and
the importer knows or believes that there is a compliance failure in relation to the product.
In this section “compliance failure” means a failure by a manufacturer of a product to comply with a relevant security requirement relating to the product.
This section applies if, at any time after an importer of a relevant connectable product makes it available in the United Kingdom—
the importer is informed that there is, or may be, a compliance failure in relation to the product, and
the importer is aware, or ought to be aware, that the product is or will be a UK consumer connectable product.
The importer must take all reasonable steps to investigate whether there is a compliance failure in relation to the product.
In this section “compliance failure” means a failure by the importer, or by a manufacturer of the product, to comply with a relevant security requirement relating to the product.
This section applies if, at any time after an importer of a relevant connectable product makes it available to a customer in the United Kingdom—
the importer becomes aware, or ought to be aware, of a compliance failure in relation to the product, and
the importer is aware, or ought to be aware, that the product is a UK consumer connectable product.
The importer must, as soon as is practicable, take all reasonable steps to remedy the compliance failure.
The importer must notify the persons listed in subsection (4) of the compliance failure as soon as possible.
The persons referred to in subsection (3) are—
the enforcement authority, and
in a case where specified conditions are met, any customer in the United Kingdom to whom the importer supplied the product.
In subsection (4)(b) “specified” means specified in regulations made by the Secretary of State. Regulations under this subsection are subject to the negative resolution procedure.
The notification under subsection (3) must include the following information—
details of the compliance failure;
any risks of which the importer is aware that are posed by the compliance failure;
any steps that have been taken by the importer to remedy the compliance failure and whether or not those steps have been successful.
In this section “compliance failure” means a failure by the importer to comply with a relevant security requirement relating to the product.
This section applies if, at any time after an importer of a relevant connectable product makes it available in the United Kingdom—
the importer becomes aware, or ought to be aware, of a compliance failure in relation to the product, and
the importer is aware, or ought to be aware, that the product is or will be a UK consumer connectable product.
In this section “compliance failure” means a failure by a manufacturer of the product to comply with a relevant security requirement relating to the product.
The importer must contact the manufacturer about the compliance failure as soon as possible. This is subject to subsection (10)(b).
If it appears to the importer that it is unlikely that the compliance failure will be remedied in accordance with section 11(2)(b), the importer must, as soon as is practicable, take all reasonable steps to prevent the product from being made available to customers in the United Kingdom (where it has not already been so made available).
The importer must notify the persons listed in subsection (6) of the compliance failure as soon as possible after the importer has contacted (or attempted to contact) the manufacturer in accordance with subsection (3) (or, if subsection (10)(b) applies, as soon as possible). This is subject to subsection (10)(a) and (c).
The persons referred to in subsection (5) are—
the enforcement authority,
any distributor to whom the importer supplied the product, and
in a case where specified conditions are met, any customer in the United Kingdom to whom the importer supplied the product.
In subsection (6)(c) “specified” means specified in regulations made by the Secretary of State. Regulations under this subsection are subject to the negative resolution procedure.
The notification under subsection (5) must include the following information—
details of the compliance failure;
any risks of which the importer is aware that are posed by the compliance failure;
any steps of which the importer is aware that have been taken by the manufacturer to remedy the compliance failure and whether or not those steps have been successful.
When the importer notifies a person within subsection (6)(b) of the compliance failure, the importer must also inform the person whether or not—
the manufacturer is aware of the compliance failure;
the enforcement authority has been notified of the compliance failure.
Where the importer became aware of the compliance failure as a result of being notified of it by a relevant person in accordance with this Chapter—
the importer does not need to notify the relevant person of the compliance failure,
if the relevant person— the importer does not need to contact the manufacturer about the compliance failure, and
is the manufacturer, or
informs the importer that the manufacturer is aware of the compliance failure,
if the relevant person informs the importer that the enforcement authority has been notified of the compliance failure, the importer does not need to notify the enforcement authority of the compliance failure.
An importer of a relevant connectable product must maintain a record of—
any investigations carried out by the importer (whether or not as a result of information received as mentioned in section 17(1)(a)) in relation to a compliance failure, or suspected compliance failure, by—
the importer, or
a manufacturer of the product;
any investigations of which the importer is aware that have been carried out by a manufacturer of the product in relation to a compliance failure, or suspected compliance failure, by the manufacturer.
A record of an investigation must contain the following information—
the outcome of the investigation;
where it was determined that there was a compliance failure, details of that compliance failure;
any steps taken by the importer or the manufacturer (as the case may be) to remedy the compliance failure and whether or not those steps were successful.
An importer is not to be regarded as having failed to comply with the duty imposed by subsection (1)(b) to maintain a record of an investigation carried out by a manufacturer if—
the record of the investigation does not contain all of the information required by subsection (2),
the missing information may only be obtained from the manufacturer, and
the importer has taken reasonable steps to obtain that information from the manufacturer.
A record of an investigation must be retained for a period of 10 years beginning with the day on which the record is made.
In this section “compliance failure”, in relation to a product, means a failure to comply with a relevant security requirement relating to the product.
A distributor of a relevant connectable product must comply with any relevant security requirements relating to the product if condition A or B is met.
Condition A is that the distributor—
intends the product to be a UK consumer connectable product, or
is aware, or ought to be aware, that the product will be a UK consumer connectable product.
Condition B is that—
the product is a UK consumer connectable product, and
at the time it was made available by the distributor, condition A was met in relation to the product.
For the meaning of “UK consumer connectable product”, see section 54.
Subsection (2) applies if a distributor of a relevant connectable product—
intends the product to be a UK consumer connectable product, or
is aware, or ought to be aware, that the product will be a UK consumer connectable product.
The distributor may not make the product available in the United Kingdom unless it is accompanied by—
a statement of compliance, or
a summary of the statement of compliance prepared in accordance with section 9(2)(b).
In a case where regulations made under section 9(7) provide that a manufacturer of a relevant connectable product is to be treated as complying with section 9(2) if conditions specified in the regulations are met—
a distributor of the product who meets the condition in subsection (1)(a) or the condition in subsection (1)(b) of this section may not make the product available in the United Kingdom unless the distributor is satisfied that the conditions specified in the regulations have been met, and
subsection (2) does not apply.
A distributor may not make a relevant connectable product available in the United Kingdom if—
the distributor—
intends the product to be a UK consumer connectable product, or
is aware, or ought to be aware, that the product will be a UK consumer connectable product, and
the distributor knows or believes that there is a compliance failure in relation to the product.
In this section “compliance failure” means a failure by a manufacturer of a product to comply with a relevant security requirement relating to the product.
This section applies if, at any time after a distributor of a relevant connectable product makes it available to a customer in the United Kingdom—
the distributor becomes aware, or ought to be aware, of a compliance failure in relation to the product, and
the distributor is aware, or ought to be aware, that the product is a UK consumer connectable product.
The distributor must, as soon as is practicable, take all reasonable steps to remedy the compliance failure.
The distributor must notify the persons listed in subsection (4) of the compliance failure as soon as possible.
The persons referred to in subsection (3) are—
the enforcement authority, and
in a case where specified conditions are met, any customer in the United Kingdom to whom the distributor supplied the product.
In subsection (4)(b) “specified” means specified in regulations made by the Secretary of State. Regulations under this subsection are subject to the negative resolution procedure.
The notification under subsection (3) must include the following information—
details of the compliance failure;
any risks of which the distributor is aware that are posed by the compliance failure;
any steps taken by the distributor to remedy the compliance failure and whether or not those steps have been successful.
In this section “compliance failure” means a failure by the distributor to comply with a relevant security requirement relating to the product.
This section applies if, at any time after a distributor of a relevant connectable product makes it available in the United Kingdom—
the distributor becomes aware, or ought to be aware, of a compliance failure in relation to the product, and
the distributor is aware, or ought to be aware, that the product is or will be a UK consumer connectable product.
In this section “compliance failure” means a failure by a manufacturer of the product to comply with a relevant security requirement relating to the product.
The distributor must contact the manufacturer about the compliance failure as soon as possible. This is subject to subsection (11)(b).
If— the distributor must (unless subsection (11)(a) applies) contact that other relevant person about the compliance failure as soon as possible.
it is not possible to contact the manufacturer as required by subsection (3), and
a relevant person other than the manufacturer supplied the product to the distributor,
If it appears to the distributor that it is unlikely that the compliance failure will be remedied in accordance with section 11(2)(b), the distributor must take all reasonable steps to prevent the product from being made available to customers in the United Kingdom (where it has not already been so made available).
The distributor must notify the persons listed in subsection (7) of the compliance failure as soon as possible after the distributor has contacted (or attempted to contact) the manufacturer in accordance with subsection (3) (or, if subsection (11)(b) applies, as soon as possible). This is subject to subsection (11)(a) and (c).
The persons referred to in subsection (6) are—
the enforcement authority,
any importer or distributor to whom the distributor supplied the product,
if not already notified as a result of subsection (3) or (4), the person from whom the distributor obtained the product, and
in a case where specified conditions are met, any customer in the United Kingdom to whom the distributor supplied the product.
In subsection (7)(d) “specified” means specified in regulations made by the Secretary of State. Regulations under this subsection are subject to the negative resolution procedure.
The notification under subsection (6) must include the following information—
details of the compliance failure;
any risks of which the distributor is aware that are posed by the compliance failure;
any steps of which the distributor is aware that have been taken by the manufacturer to remedy the compliance failure and whether or not those steps have been successful.
When the distributor notifies a person within subsection (7)(b) or (c) of the compliance failure, the distributor must also inform the person whether or not—
the manufacturer is aware of the compliance failure;
the enforcement authority has been notified of the compliance failure.
Where the distributor became aware of the compliance failure as a result of being notified of it by a relevant person in accordance with this Chapter—
the distributor does not need to notify the relevant person of the compliance failure,
if the relevant person— the distributor does not need to contact the manufacturer about the compliance failure, and
is the manufacturer, or
informs the distributor that the manufacturer is aware of the compliance failure,
if the relevant person informs the distributor that the enforcement authority has been notified of the compliance failure, the distributor does not need to notify the enforcement authority of the compliance failure.
The person responsible for enforcing the provisions of this Part, and of regulations made under it, is the Secretary of State (but see also section 27).
For the investigatory powers available to the Secretary of State, see Schedule 5 to the Consumer Rights Act 2015.
section 26(1) of the Product Security and Telecommunications Infrastructure Act 2022;
Despite paragraph 13(4) of Schedule 5 to that Act, the Secretary of State may exercise the powers in Part 3 of that Schedule (powers in relation to the production of information) for any purpose relating to the enforcement of this Part (and in such a case the restriction imposed by paragraph 13(5) of that Schedule does not apply).
Nothing in this section authorises the Secretary of State to bring proceedings in Scotland for an offence under this Part.
The Secretary of State may by regulations authorise any person to exercise any enforcement function of the Secretary of State.
Regulations under this section may provide for payments to be made by the Secretary of State in respect of the performance of any enforcement function.
Regulations under this section do not prevent the Secretary of State from performing a function to which the regulations relate.
In this Part “enforcement function” means—
any function of the Secretary of State under this Chapter;
any function of the Secretary of State under Schedule 5 to the Consumer Rights Act 2015, so far as exercisable for the purposes of this Part.
Accordingly, in the case of the exercise of an enforcement function by a person authorised by regulations under this section to exercise that function, any reference in this Chapter or that Schedule to the Secretary of State in connection with that function is to be read as a reference to that person.
Regulations under this section are subject to the affirmative resolution procedure.
If the Secretary of State has reasonable grounds to believe that a person has failed to comply with a relevant duty, the Secretary of State may give a compliance notice to the person.
A compliance notice is a notice under this section requiring the person to whom it is given to comply with the relevant duty specified in the notice within a specified period.
A compliance notice given to a person must—
set out the reasons for giving the compliance notice;
explain what may happen if the person does not comply with it;
explain how the person may appeal against it.
A compliance notice given to a person may—
require the person to take any specified steps within a specified period in order to comply with the relevant duty;
require the person within a specified period to provide evidence to the satisfaction of the Secretary of State that the person has complied with, or is complying with, the relevant duty.
Before giving a compliance notice to a person, the Secretary of State must—
notify the person that the Secretary of State intends to give a compliance notice to the person, and
give the person an opportunity to make representations about the giving of the notice.
The Secretary of State may not give a compliance notice to the person until the end of the period of 10 days beginning with the day on which the notification required by subsection (5)(a) is given.
A compliance notice may not be given to a person more than once in respect of the same act or omission.
In this section—
“compliance failure”, in relation to a product, means a failure by a relevant person to comply with a relevant security requirement in relation to the product;
“specified” means specified in the compliance notice.
If the Secretary of State has reasonable grounds to believe that a person is carrying on, or is likely to carry on, an activity in breach of a relevant duty, the Secretary of State may give a stop notice to the person.
A stop notice is a notice under this section requiring the person to whom it is given to stop carrying on an activity specified in the notice within a specified period.
A stop notice given to a person must—
set out the reasons for giving the stop notice;
explain what may happen if the person does not comply with it;
explain how the person may appeal against it.
A stop notice given to a person may—
require the person to take any specified steps within a specified period for the purpose of complying with the stop notice;
require the person within a specified period to provide evidence to the satisfaction of the Secretary of State that the person is complying with the stop notice;
require the person to take steps to inform customers of any risks posed by using a product to which the notice relates;
provide that, if the person takes specified steps within a specified period for the purpose of complying with the relevant duty, the stop notice will be revoked;
require the person within a specified period to provide evidence to the satisfaction of the Secretary of State that the person has taken those steps.
Before giving a stop notice to a person, the Secretary of State must—
notify the person that the Secretary of State intends to give a stop notice to the person, and
give the person an opportunity to make representations about the giving of the notice.
The Secretary of State may not give a stop notice to the person until the end of the period of 10 days beginning with the day on which the notification required by subsection (5)(a) is given.
Subsections (5) and (6) do not apply if the Secretary of State considers that there is an urgent need to give a stop notice to the person.
In this section—
a credit-sale agreement (within the meaning of that Act);
Subsection (2) applies if—
the Secretary of State has reasonable grounds to believe that there is a compliance failure in relation to any UK consumer connectable products that have been supplied to customers,
the Secretary of State considers that the action (if any) being taken by any relevant person in relation to the compliance failure is inadequate, and
the Secretary of State considers that any action which the Secretary of State may take under section 28, 29 or 42 would not be sufficient to deal with the risks posed by the compliance failure.
The Secretary of State may give a recall notice to any of the following—
in the case of a compliance failure by a manufacturer of the products—
any manufacturer of the products;
an authorised representative of a manufacturer of the products;
any importer or distributor who made any of the products available in the United Kingdom;
in the case of a compliance failure by an importer or distributor who supplied any of the products to a customer, that importer or distributor.
A recall notice is a notice under this section requiring the person to whom it is given (“P”) to make arrangements within a specified period for the return of the products to P or to another person specified in the notice.
A recall notice given to a person must—
set out the reasons for giving the recall notice;
explain what may happen if the person does not comply with it;
explain how the person may appeal against it.
A recall notice given to a person may—
require the person to take specified steps within a specified period for the purpose of complying with the recall notice;
require the person within a specified period to provide evidence to the satisfaction of the Secretary of State that the person is complying with the recall notice;
require the person to provide the Secretary of State with specified information in relation to the products, including information relating to times after the products have been returned;
require the person to take steps to inform customers of any risks posed by using the products.
Before giving a recall notice to a person, the Secretary of State must—
notify the person that the Secretary of State intends to give a recall notice to the person, and
give the person an opportunity to make representations about the giving of the notice.
The Secretary of State may not give a recall notice to the person until the end of the period of 10 days beginning with the day on which the notification required by subsection (6)(a) is given.
Subsections (6) and (7) do not apply if the Secretary of State considers that there is an urgent need to give a recall notice to the person.
In this section—
“compliance failure”, in relation to a product, means a failure by a relevant person to comply with a relevant security requirement in relation to the product;
The Secretary of State may vary or revoke an enforcement notice.
But the Secretary of State may not vary an enforcement notice in order to make it more onerous.
It is an offence for a person to fail to comply with an enforcement notice.
It is a defence for a person (“P”) charged with an offence under this section to show that P took all reasonable steps to comply with the notice.
P is to be taken to have shown the fact mentioned in subsection (2) if—
sufficient evidence of the fact is adduced to raise an issue with respect to it, and
the contrary is not proved beyond reasonable doubt.
P may not rely on a defence under subsection (2) which involves a third party allegation unless P has—
given a notice to the prosecutor in accordance with this section, or
obtained the permission of the court.
In subsection (4) “third party allegation” means an allegation that the failure to comply with the notice was due to—
the act or omission of another person, or
P’s reliance on information provided by another person.
The notice under subsection (4)(a) must give any information in P’s possession which identifies, or may assist in identifying, the person mentioned in subsection (5).
In the case of proceedings in England and Wales or Northern Ireland, the notice under subsection (4)(a) must be given to the prosecutor no later than 7 clear days before the hearing of the proceedings.
In the case of proceedings in Scotland, the notice under subsection (4)(a) must be given to the prosecutor—
where an intermediate diet is to be held, at or before that diet;
where such a diet is not to be held, no later than 10 clear days before the trial diet.
A person guilty of an offence under this section is liable—
on summary conviction in England and Wales, to a fine;
on summary conviction in Scotland, to a fine not exceeding level 5 on the standard scale;
on summary conviction in Northern Ireland, to a fine not exceeding level 5 on the standard scale.
A person who is given an enforcement notice may appeal to the First-tier Tribunal (“the Tribunal”) against the enforcement notice or any provision of it.
An appeal under this section is to be brought before the end of the period of 28 days beginning with—
the day on which the notice was given, or
if the appeal is in respect of the variation of a notice under section 31, the day on which the notice was varied.
On an appeal under this section, the Tribunal—
if it is satisfied that any of the grounds in subsection (4) applies, may—
vary the notice, or
cancel the notice or any part of it;
if it is not so satisfied, must confirm the notice.
The grounds referred to in subsection (3)(a) are—
that the decision to give the notice, or to include any provision in the notice, was based, wholly or partly, on an error of fact;
that the decision to give the notice, or to include any provision in the notice, was wrong in law;
that the notice, or any provision of it, was unfair or unreasonable for any other reason.
If the Tribunal cancels an enforcement notice (in whole or in part), it may refer the matter back to the person that gave the notice with a direction to reconsider and make a new decision in accordance with its ruling.
But the Tribunal may not direct the person that gave the notice to take any action which the person would not otherwise have the power to take.
In determining an appeal under this section, the Tribunal may—
review any determination of fact on which the decision to give the notice, or to include any provision in it, was based;
take into account evidence which was not available to the person that gave the notice.
Where an appeal in respect of an enforcement notice, or the variation of an enforcement notice, is made under this section, the notice or variation (as the case may be) is of no effect until the appeal is determined or withdrawn.
Where an appeal is or may be made to the Upper Tribunal in relation to a decision of the Tribunal under this section, the Upper Tribunal may suspend the notice to which the appeal relates, or any provision of it, until the appeal is determined or withdrawn.
This section applies if—
the Secretary of State gives a stop notice or a recall notice to a person,
the relevant breach in respect of which the notice was given did not occur, and
the decision to give the notice was not attributable to any neglect or default by the person.
The Secretary of State is liable to pay compensation to the person to whom the notice was given in respect of any loss or damage caused as a result of the giving of the notice.
The amount of compensation payable to a person under this section is to be determined by the Secretary of State.
In determining that amount, the Secretary of State may have regard to the extent to which the person took reasonable steps to reduce any loss or damage caused as a result of the giving of the notice.
A person seeking compensation under this section must make a claim to the Secretary of State.
The claim—
must be made in such form, and such manner, as the Secretary of State may direct;
must contain evidence of the loss or damage in respect of which compensation is sought;
must specify the amount of compensation which the person is seeking.
The Secretary of State must, before the end of the period of 45 days beginning with the day on which the Secretary of State receives the claim—
decide whether the person is entitled to compensation under this section and, if so, the amount of that compensation, and
notify the person of the decision.
In this section “relevant breach” means—
in the case of a stop notice, a breach of a duty imposed by or under Chapter 2;
in the case of a recall notice, a compliance failure within the meaning of section 30.
A person may appeal to the First-tier Tribunal (“the Tribunal”) against—
a decision not to award compensation to the person under section 34, or
the amount of compensation awarded to the person under that section.
An appeal under this section is to be brought before the end of the period of 28 days beginning with the day on which the person is notified in accordance with section 34(7)(b).
On an appeal under this section against a decision not to award compensation under section 34, the Tribunal—
if it is satisfied that the ground in subsection (6)(a) or the ground in subsection (6)(b) applies, may quash the decision;
if it is not so satisfied, must confirm the decision.
If the Tribunal quashes a decision under subsection (3)(a), the Tribunal may—
direct the Secretary of State to pay compensation of an amount determined by the Tribunal, or
refer the matter back to the Secretary of State with a direction to reconsider and make a new decision in accordance with its ruling.
On an appeal under this section against the amount of compensation awarded under section 34, the Tribunal—
if it is satisfied that any of the grounds in subsection (6) applies, may—
vary the amount of compensation awarded, or
refer the matter back to the Secretary of State with a direction to reconsider and make a new decision in accordance with its ruling;
if it is not so satisfied, must confirm the amount of compensation awarded.
The grounds referred to in subsections (3)(a) and (5)(a) are—
that the decision appealed against was based, wholly or partly, on an error of fact;
that the decision appealed against was wrong in law;
that the amount of compensation awarded was unfair or unreasonable for any other reason.
In determining an appeal under this section, the Tribunal may—
review any determination of fact on which the decision appealed against was based;
take into account evidence which was not available to the Secretary of State.
The Tribunal may not direct the Secretary of State under this section to pay any compensation which the Secretary of State would not otherwise be liable to pay under section 34(2).
If the Secretary of State is satisfied on the balance of probabilities that a person has failed to comply with a relevant duty, the Secretary of State may give a penalty notice to the person.
A penalty notice is a notice under this section requiring the person to pay a penalty of a specified amount to the Secretary of State within a specified period.
A person may not be given more than one penalty notice in respect of a single relevant breach.
A penalty notice may not require a person to pay a penalty of an amount greater than the relevant maximum in respect of a single relevant breach. For the relevant maximum, see section 38.
A penalty notice given in respect of a relevant breach may, in addition to requiring the person to pay a penalty of a specified amount (“the fixed penalty”), require the person to pay to the Secretary of State within a specified period a further daily penalty, of a specified amount not exceeding £20,000, for each day for which the relevant breach continues after the end of the period specified for payment of the fixed penalty.
The amount of each such daily penalty is to be disregarded for the purposes of subsection (4).
A penalty notice may not specify a period for paying a penalty that is less than 28 days beginning with the day on which the notice is given.
A penalty notice may be given to a person in respect of a relevant breach whether or not the person has been given an enforcement notice in respect of the relevant breach.
Any penalty received by the Secretary of State in accordance with this section is to be paid into the Consolidated Fund.
In this section—
any trade or profession;
“relevant breach” means a failure to comply with a relevant duty;
any trade or profession;
“relevant duty” means a duty imposed by or under Chapter 2;
“specified” means specified in the penalty notice.
“specified” means specified in the penalty notice.
A penalty imposed by a penalty notice must be of an amount that the Secretary of State considers to be—
appropriate, and
proportionate to the relevant breach in respect of which it is imposed.
In determining the amount of a penalty to be imposed by a penalty notice on a person, the Secretary of State must take into account the following matters (among others)—
the effects of the relevant breach in respect of which the penalty is imposed;
any action taken by the person to remedy the relevant breach or mitigate its effects.
In this section “relevant breach” has the same meaning as in section 36.
For the purposes of section 36 the relevant maximum, in relation to a person, is the greater of— This is subject to subsections (2) to (6).
£10 million, and
4% of the person’s qualifying worldwide revenue for the person’s most recent complete accounting period.
Where the Secretary of State is deciding the amount of the penalty to be imposed on a person at a time when the person’s first accounting period has not yet ended, the reference in subsection (1)(b) to the person’s qualifying worldwide revenue for the person’s most recent complete accounting period is a reference to the amount that the Secretary of State estimates is likely to be the person’s qualifying worldwide revenue for that period.
For the purposes of this section, the amount of a person’s qualifying worldwide revenue for an accounting period is, in the event of a disagreement between the person and the Secretary of State, the amount determined by the Secretary of State.
In the case of an accounting period that is not a period of 12 months, the amount of the person’s qualifying worldwide revenue (or estimated qualifying worldwide revenue) for the period is to be adjusted as follows—
if the accounting period is less than 12 months, the amount is to be proportionately increased;
if the accounting period is more than 12 months, the amount is to be proportionately reduced.
If the person does not have an accounting period, the relevant maximum is £10 million.
The Secretary of State may by regulations provide that, where the person is a member of one or more groups, the relevant maximum is to be calculated by reference to a specified percentage of the total qualifying worldwide revenue of those groups, or of members of those groups that are of a specified description, for a specified period. “Specified” means specified in the regulations.
The Secretary of State may by regulations make provision about how the qualifying worldwide revenue of a person or persons for a period is to be determined for the purposes of this section.
Regulations under this section are subject to the affirmative resolution procedure.
In this section—
a conditional sale agreement (within the meaning of the Consumer Credit Act 1974);
“parent undertaking” and “subsidiary undertaking” have the same meaning as they have for the purposes of the Companies Act 2006 (see section 1162 of, and Schedule 7 to, that Act);
“relevant business” means—
“relevant connectable product” has the meaning given by section 4;
“group” means a parent undertaking and its subsidiary undertakings;
Before giving a penalty notice to a person, the Secretary of State must—
notify the person of the Secretary of State’s intention to give a penalty notice to the person, and
give the person an opportunity to make representations about the giving of the notice.
The Secretary of State may not give a penalty notice to the person before the end of the period of 28 days beginning with the day on which notification under subsection (1)(a) is given.
A penalty notice must contain the following information—
the reasons for giving the penalty notice;
the amount of the penalty;
how payment may be made;
the period within which payment must be made;
how the person to whom the notice is given may appeal against the imposition of the penalty;
the consequences of failing to pay the penalty.
The Secretary of State may vary or revoke a penalty notice.
But the Secretary of State may not vary a penalty notice in order to make it more onerous.
In England and Wales, a penalty is recoverable as if it were payable under an order of the High Court.
In Scotland, a penalty may be enforced in the same manner as an extract registered decree arbitral bearing a warrant for execution issued by the sheriff court of any sheriffdom in Scotland.
In Northern Ireland, a penalty is recoverable as if it were payable under an order of the High Court.
Where action is taken under this section for the recovery of a penalty, the penalty—
in relation to England and Wales, is to be treated for the purposes of section 98 of the Courts Act 2003 (register of judgments and orders etc) as if it were a judgment entered in the High Court;
in relation to Northern Ireland, is to be treated for the purposes of Article 116 of the Judgments Enforcement (Northern Ireland) Order 1981 (S.I. 1981/226 (N.I. 6)) (register of judgments) as if it were a judgment in respect of which an application has been accepted under Article 22 or 23(1) of that Order.
In this section “penalty” means a penalty imposed by a penalty notice under section 36.
A person who is given a penalty notice may appeal to the First-tier Tribunal (“the Tribunal”) against—
the imposition of a penalty imposed by the penalty notice;
the amount of such a penalty;
the period within which such a penalty, or any part of it, is required to be paid.
An appeal under this section is to be brought before the end of the period of 28 days beginning with—
the day on which the penalty notice was given, or
if the appeal is in respect of the variation of a notice under section 39(4), the day on which the notice was varied.
On an appeal under this section, the Tribunal—
if it is satisfied that any of the grounds in subsection (4) applies, may—
vary the amount of a penalty imposed by the penalty notice or the period within which such a penalty, or any part of it, is required to be paid, or
cancel any penalty imposed by the penalty notice;
if it is not so satisfied, must confirm the penalty notice.
The grounds referred to in subsection (3)(a) are—
that the decision appealed against was based, wholly or partly, on an error of fact;
that the decision appealed against was wrong in law;
that the decision appealed against was unfair or unreasonable for any other reason.
If the Tribunal cancels a penalty imposed by a penalty notice, it may refer the matter back to the person that gave the notice with a direction to reconsider and make a new decision in accordance with its ruling.
But the Tribunal may not direct the person that gave the notice to take any action which the person would not otherwise have the power to take.
In determining an appeal under this section, the Tribunal may—
review any determination of fact on which the decision appealed against was based;
take into account evidence which was not available to the person that gave the notice.
Where an appeal in respect of a penalty notice, or the variation of a penalty notice, is made under this section, the notice or variation (as the case may be) is of no effect until the appeal is determined or withdrawn.
Where an appeal is or may be made to the Upper Tribunal in relation to a decision of the Tribunal under this section, the Upper Tribunal may suspend the notice to which the appeal relates until the appeal is determined or withdrawn.
In this section “forfeitable products” means—
any relevant connectable products that—
are in the possession or control of any manufacturer, importer or distributor of the products,
are in the possession or control of an authorised representative of a manufacturer of the products, or
are detained under paragraph 28 of Schedule 5 to the Consumer Rights Act 2015;
any relevant connectable products that have been returned to any of the following persons as a result of a compliance failure, or suspected compliance failure, relating to the products—
any manufacturer, importer or distributor of the products;
an authorised representative of a manufacturer of the products;
a person acting on behalf of a person within sub-paragraph (i) or (ii);
a person specified in a recall notice under section 30.
If the Secretary of State has reasonable grounds to believe that— the Secretary of State may apply to the appropriate court (see subsection (11)(a)) for an order for the forfeiture of the products.
there is a compliance failure relating to any forfeitable products, and
the products are, or (if no order is made for their forfeiture) will be, UK consumer connectable products,
The court may, on an application under this section, make an order for the forfeiture of any forfeitable products if the court is satisfied on the balance of probabilities—
that the products are, or (if no order is made for their forfeiture) will be, UK consumer connectable products,
that there is a compliance failure in relation to the products,
that it is unlikely that the security requirement in respect of which the compliance failure exists will be complied with, and
that it is proportionate to make the order.
For the purposes of this section the court may determine that there is a compliance failure in relation to any forfeitable products if it is satisfied that there is a compliance failure in relation to products that are representative of those products (whether by reason of being of the same model or design or otherwise).
If the court makes an order for the forfeiture of any forfeitable products, it may also order the forfeiture of any other property if it is satisfied on the balance of probabilities that the property is not readily separable from the forfeitable products.
An order under this section for the forfeiture of any property—
may require the property to be delivered up to—
the Secretary of State, or
such other person as the court may direct;
may permit the Secretary of State, or such other person as the court may direct, to destroy or otherwise dispose of the property in whatever way the Secretary of State or other person considers appropriate;
may require the property to be destroyed or otherwise disposed of in accordance with any directions of the court.
Subsections (8) and (9) apply in a case where the products to which the application relates have been detained under paragraph 28 of Schedule 5 to the Consumer Rights Act 2015.
If the court is not satisfied on the balance of probabilities— the court must order the products to be returned to a person entitled to them.
that the products are, or (if no order is made for their forfeiture) will be, UK consumer connectable products,
that there is a compliance failure in relation to the products,
that it is unlikely that the security requirement in respect of which the compliance failure exists will be complied with, or
that it is proportionate to make an order for the forfeiture of the products,
Where an order for the return of any products is made under subsection (8), the products (and any other property that is not readily separable from the products) may nevertheless be detained— But if the Secretary of State decides before the end of the period mentioned in paragraph (a) that there is to be no appeal, the products must be returned as soon as possible after that decision is made.
until the end of the period within which an appeal under section 44 may be made against the order, or
if such an appeal is made, until the time when it is determined or withdrawn.
For the purposes of this section, property is not readily separable from any forfeitable products if, in all the circumstances, it is not reasonably practicable to separate the property from the forfeitable products. Those circumstances include the time and costs involved in separating the property.
For the purposes of this section—
“the appropriate court” means—
in England and Wales, a magistrates’ court;
in Scotland, a sheriff;
in Northern Ireland, a court of summary jurisdiction;
“compliance failure”, in relation to a product, means a failure by a relevant person to comply with a relevant security requirement in relation to the product;
the reference to delivery up of products is, in Scotland, a reference to delivery;
the persons “entitled” to any products are—
any person to whom they belong, and
in the case of products detained under paragraph 28 of Schedule 5 to the Consumer Rights Act 2015, the person from whom they were seized.
An application under section 42 to a magistrates’ court in England and Wales is to be made by way of complaint.
An application under section 42 to a court of summary jurisdiction in Northern Ireland is to be made by way of complaint under Part 8 of the Magistrates’ Courts (Northern Ireland) Order 1981 (S.I. 1981/1675 (N.I. 26)).
In a case where proceedings have been brought in England and Wales or Northern Ireland for— an application under section 42 relating to the compliance failure may be made in those proceedings.
an offence under section 32 relating to a compliance failure, or
an offence under paragraph 36(1) or (2) of Schedule 5 to the Consumer Rights Act 2015 arising out of any investigation into a compliance failure,
A court may not order the forfeiture of any products under section 42 unless—
the Secretary of State has given notice of— to every identifiable person having an interest in the products, or
the application, and
the date and location of the proceedings for forfeiture,
where the notice required by paragraph (a)(i) or (ii) has not been given to such a person, the court is satisfied that it was reasonable in the circumstances not to give notice to that person.
Any person having an interest in any forfeitable products is entitled to appear in proceedings under section 42 relating to the products.
No order for forfeiture under section 42 may take effect until—
the end of the period within which an appeal under section 44 may be made against the order, or
if such an appeal is made, the time when it is determined or withdrawn.
In this section “compliance failure” and “forfeitable products” have the same meaning as in section 42.
Where an order for the forfeiture of any products has been made under section 42, each of the following persons may appeal against the order—
any party to the proceedings in which the order was made;
any other person entitled to the products.
The Secretary of State may appeal against—
a decision not to make an order for forfeiture under section 42;
an order under subsection (8) of that section for the return of any products.
Where— the Secretary of State must make reasonable efforts to give notice of the appeal to every person who the Secretary of State thinks is or may be entitled to the products.
the Secretary of State brings an appeal under this section, and
no person entitled to the products in question was a party to the original proceedings,
An appeal under this section is to—
the Crown Court, in England and Wales;
the Sheriff Appeal Court, in Scotland;
a county court, in Northern Ireland.
An appeal under this section is to be brought before the end of the period of 28 days beginning with the date of the order or other decision appealed against.
Subject to subsections (7) and (8), the court hearing the appeal may make any order the court considers appropriate.
If an appeal brought by virtue of subsection (2) is allowed—
the court must order the products to be forfeited, and
sections 42(6) and 43(6) apply with the necessary adaptations.
If an appeal against an order forfeiting any products is allowed—
the court must order the products to be returned to a person entitled to them, and
section 42(9) applies with the necessary adaptations.
The persons “entitled” to any products for the purposes of this section are—
any person to whom they belong, and
in the case of products detained under paragraph 28 of Schedule 5 to the Consumer Rights Act 2015, the person from whom they were seized.
This section applies where the Secretary of State has reasonable grounds to believe that there is a compliance failure in relation to a relevant connectable product.
The Secretary of State may publish whatever information the Secretary of State considers appropriate for the purpose of informing members of the public about the following matters—
the nature of the compliance failure;
any risks posed by using the product;
any steps that may be taken to mitigate the effect of any such risks.
Information may be published under subsection (2) in whatever way the Secretary of State considers appropriate.
In this section “compliance failure”, in relation to a product, means a failure by a relevant person to comply with a relevant security requirement in relation to the product.
The Secretary of State may publish details of a failure by a relevant person to comply with a relevant security requirement in relation to a product.
The Secretary of State may publish details of any of the following—
an enforcement notice given to a person;
a penalty notice given to a person;
an order made under section 42 for the forfeiture of any products.
This section applies where conditions A and B are met.
Condition A is that the Secretary of State has reasonable grounds to believe that there is a compliance failure in relation to any UK consumer connectable products that have been supplied to customers.
Condition B is that—
a person to whom a recall notice was given in relation to the compliance failure has failed to comply with it, or
it is not possible to give a recall notice in relation to the compliance failure to one or more of the persons mentioned in section 30(2).
The Secretary of State may—
make arrangements for the delivery of the products to the Secretary of State or another person;
destroy or otherwise dispose of the products in whatever way the Secretary of State considers appropriate;
permit any person to whom the products are delivered under the arrangements mentioned in paragraph (a) to destroy or otherwise dispose of them—
in accordance with a direction of the Secretary of State, or
in whatever way the person considers appropriate.
The Secretary of State may pay such amounts as the Secretary of State considers appropriate to any customer who returns a product in accordance with arrangements made under this section
Where an amount is paid to a customer under subsection (5) in respect of a product, a relevant person may deduct that amount from any amount which the relevant person is required to pay to the customer (whether as a result of the exercise of the customer’s statutory rights or otherwise) in respect of the product.
In a case where a person to whom a recall notice was given in relation to a compliance failure failed to comply with it, the Secretary of State may recover from the person any costs or expenses reasonably incurred by the Secretary of State or another person in taking any action under this section in relation to the compliance failure.
In this section “compliance failure”, in relation to a product, means a failure by a relevant person to comply with a relevant security requirement in relation to the product.
The Secretary of State may disclose to a person any information obtained by the Secretary of State in connection with the Secretary of State’s enforcement functions if the disclosure is made for a purpose connected with an enforcement function of the Secretary of State.
A person may disclose any information to the Secretary of State if the disclosure is made for the purposes of enabling or assisting the Secretary of State to exercise any enforcement function.
A disclosure of information authorised by this Chapter does not breach—
any obligation of confidence owed by the person making the disclosure in relation to that information, or
any other restriction on the disclosure of information (however imposed).
But nothing in this Chapter authorises either of the following—
the making of a disclosure which would contravene the data protection legislation (but in determining whether a disclosure would do so, the powers conferred by this Chapter are to be taken into account);
the making of a disclosure which is prohibited by any of Parts 1 to 7 or Chapter 1 of Part 9 of the Investigatory Powers Act 2016.
In this section “the data protection legislation” has the same meaning as in the Data Protection Act 2018 (see section 3 of that Act).
Subsections (1) and (2) do not affect any power to disclose that exists apart from this section.
Part 1 of the Product Security and Telecommunications Infrastructure Act 2022.
A person who is not authorised to exercise a function of the Secretary of State under this Chapter commits an offence if the person purports to act as a person who is so authorised.
A person guilty of an offence under this section is liable—
on summary conviction in England and Wales, to a fine;
on summary conviction in Scotland, to a fine not exceeding level 5 on the standard scale;
on summary conviction in Northern Ireland, to a fine not exceeding level 5 on the standard scale.
A notice under this Chapter may be given to a person by—
handing it to the person,
leaving it at the person’s proper address,
sending it by post to the person at that address, or
subject to subsection (7), sending it to the person by electronic means.
A notice to a body corporate may be given to the secretary or clerk of that body.
A notice to a partnership may be given to a partner or a person who has the control or management of the partnership business.
For the purposes of this section and of section 7 of the Interpretation Act 1978 (service of documents by post) in its application to this section, the proper address of a person is—
in the case of a body corporate or its secretary or clerk, the address of the body’s registered or principal office;
in the case of a partnership, a partner or a person having the control or management of the partnership business, the address of the principal office of the partnership;
in any other case, the person’s last known address.
For the purposes of subsection (4) the principal office of a company registered outside the United Kingdom, or of a partnership carrying on business outside the United Kingdom, is its principal office within the United Kingdom.
If a person has specified an address in the United Kingdom, other than the person’s proper address within the meaning of subsection (4), as the one at which the person or someone on the person’s behalf will accept notices of the same description as a notice under this Chapter, that address is also treated for the purposes of this section and section 7 of the Interpretation Act 1978 as the person’s proper address.
A notice may be sent to a person by electronic means only if—
the person has indicated that notices of the same description as a notice under this Chapter may be given to the person by being sent to an electronic address and in an electronic form specified for that purpose, and
the notice is sent to that address in that form.
A notice sent to a person by electronic means is, unless the contrary is proved, to be treated as having been given at 9 am on the working day immediately following the day on which it was sent.
In this section—
“relevant agreement” means—
in the case of a person who is an authorised representative, the business of acting as an authorised representative or as part of which the person is an authorised representative.
This section applies where a manufacturer that is not established in the United Kingdom authorises a person in the United Kingdom, with the agreement of that person, to perform any of the duties listed in subsection (3) on behalf of the manufacturer.
In this Part “authorised representative”, in relation to a manufacturer, means a person authorised by the manufacturer as mentioned in subsection (1).
The duties referred to in subsection (1) are—
any duties under regulations made under section 9(6) (duties relating to statements of compliance);
the duties under section 11(2) and (3) (duties to take action in relation to compliance failures);
the duty under section 12(1) (duty to maintain records).
If the authorised representative fails to comply with the duty, the authorised representative may be proceeded against under this Part for failing to comply with the duty.
Subsection (4) does not affect the liability of the manufacturer under this Part for a failure to comply with the duty.
Where an offence under this Part has been committed by a body corporate and it is proved that the offence— that person (as well as the body corporate) is guilty of that offence and liable to be proceeded against and punished accordingly.
has been committed with the consent or connivance of a person listed in subsection (2), or
is attributable to any neglect on the part of such a person,
The persons referred to in subsection (1)(a) are—
a director, manager, secretary or other similar officer of the body;
any person who was purporting to act in such a capacity.
Where the affairs of a body corporate are managed by its members, subsection (1) applies in relation to the acts and defaults of a member, in connection with that management, as if the member were a director of the body corporate.
Where an offence under this Part has been committed by a Scottish partnership and it is proved that the offence— that person (as well as the partnership) is guilty of that offence and liable to be proceeded against and punished accordingly.
has been committed with the consent or connivance of a partner in the partnership or a person purporting to act as such a partner, or
is attributable to any neglect on the part of such a person,
The Secretary of State may issue guidance about the effect of any provision made by or under this Part.
The enforcement authority may issue guidance about the exercise of any of its enforcement functions.
A person who issues guidance under this section may from time to time revise the guidance.
A person who issues guidance under this section must publish—
the guidance, and
any revisions of the guidance.
In this Part “UK consumer connectable product” means a relevant connectable product that meets condition A or B.
Condition A is that the product—
is or has been made available to consumers in the United Kingdom, and
has not been supplied by a relevant person to any customer (whether or not in the United Kingdom) at any time before being so made available.
Condition B is that—
the product is or has been made available to customers in the United Kingdom who are not consumers,
the product has not been supplied by a relevant person to any customer (whether or not in the United Kingdom) at any time before being so made available, and
products identical to the product meet condition A.
Subsections (5) to (9) apply for the purposes of subsections (2)(b) and (3)(b).
Where— the product is not to be treated as having been supplied to the original customer.
a product that has been supplied to a customer (“the original customer”) is returned to a relevant person in the exercise of any right (whether statutory or otherwise) to return unwanted products, and
the product is subsequently made available to customers in the United Kingdom,
Where— the product is not to be treated as having been supplied to the original customer.
a product that has been supplied to a customer (“the original customer”) is returned to a relevant person—
in accordance with arrangements made for the purposes of, or in connection with, this Part, or
as a result of any other action taken under, or for the purposes of, this Part, and
the product is subsequently made available to customers in the United Kingdom,
Where a product that has been supplied to a customer is reconditioned by or on behalf of a manufacturer of the product before being made available to customers in the United Kingdom, the product is not to be treated as having been supplied to that customer.
The reference in subsection (7) to reconditioning a product is a reference to doing anything to the product, or its packaging, in order to prepare the product to be made available to customers.
Where a product has been supplied to a customer (“C”) who would, in the absence of section 7(6), be a distributor of the product—
the product is not to be treated as having been supplied to C, and
where any of subsections (5) to (7) applies, the product is not to be treated as having been supplied to C or to any customer of C.
The Secretary of State may by regulations—
repeal subsection (2)(b) or (3)(b);
make any amendments of this Part that the Secretary of State considers necessary or appropriate in consequence of such repeal.
Regulations made under subsection (10) are subject to the affirmative resolution procedure.
This section has effect for the purposes of this Part.
Any reference to supplying a product is a reference to supplying the product in the course of business, and includes a reference to doing any of the following—
providing the product in exchange for any non-monetary consideration;
providing the product in, or in connection with, the performance of a statutory function;
giving the product as a prize or otherwise making a gift of the product.
Any reference to supplying a product does not include a reference to hiring out or lending the product, except where—
the hiring out or lending is by a manufacturer of the product, or
the product is supplied under a hire-purchase agreement.
Where a product has at any time been supplied by being hired out or lent to a person, neither of the following is to be treated as a further supply of the product to that person—
a continuation or renewal of the hire or loan (whether on the same or different terms);
any transaction for the transfer after that time of any interest in the product to the person.
The performance of a contract for the carrying out of works that consist of or include the installation of a product into a building or structure is to be treated as a supply of the product in so far as, but only in so far as, it involves the provision of the product to a person by means of its installation into the building or structure.
The performance of a contract by the construction of a building or structure on land is to be treated as a supply of a product in so far as, but only in so far as, it involves the provision of the product to a person by means of its incorporation into the building or structure.
Any reference to supplying a product does not include a reference to any supply of a product that is effected by the creation or disposal of an interest in land, or by the performance of an agreement for the creation or disposal of such an interest, except where—
the product is incorporated into or contained in a building (or part of a building) constructed on the land,
the building (or part) is to be used for a particular purpose, and
at the time of the supply, the building (or part) has not previously been used for that purpose.
Any reference to supplying a product does not include a reference to supplying the product by a sale of the product as scrap (that is to say, for the value of materials included in the product rather than for the value of the product itself).
Any reference to supplying a product does not include a reference to merely providing transport services for the purposes of enabling the product to be supplied to any person.
Where a product that has been supplied to a customer is temporarily returned for any reason to a relevant person by a person (“P”) who is— the return of the product to P is not to be treated as a supply of the product to P.
the customer to whom the product was supplied, or
the customer’s successor in title,
Where a person (“the ostensible supplier”) supplies a product to another person (“the customer”) under a relevant agreement and the ostensible supplier— the effective supplier and not the ostensible supplier is to be regarded as supplying the product to the customer.
carries on the business of financing the provision of products for others by means of relevant agreements, and
in the course of that business, acquired an interest in the product supplied to the customer as a means of financing the provision of the product for the customer by a further person (“the effective supplier”),
In this section—
“non-monetary consideration” means consideration other than money;
“enforcement function” has the meaning given by section 27(5);
a relevant person acting in that capacity in relation to the product, or
“relevant security requirement”, in relation to a relevant person, means a security requirement applying to the relevant person;
In this Part—
the activities of a local or public authority;
“relevant person” has the meaning given by section 7(2);
In this Part any reference to making a product available in the United Kingdom is a reference to supplying, or offering to supply, the product to a person in the United Kingdom.
The electronic communications code is amended as follows.
In paragraph 3 (meaning of “code right”)—
the existing wording becomes sub-paragraph (1);
in sub-paragraph (1)—
after paragraph (c) insert—;
after paragraph (e) insert—;
after paragraph (f) insert—;
In sub-paragraph (1), references to “the first operator” are to the operator mentioned in the opening words of that sub-paragraph.
For paragraph 4 (the statutory purposes) substitute—
In paragraph 9 (conferral of code rights)—
the existing wording becomes sub-paragraph (1), and
But in a case where an operator (“the first operator”) has the right to share the use of electronic communications apparatus with another operator (“the second operator”) under or by virtue of an agreement under this Part, sub-paragraph (1) does not prevent the agreement from providing for the first operator to permit the second operator to exercise, in connection with the sharing, a code right conferred on the first operator by the agreement.
In paragraph 13 (access to land)—
in sub-paragraph (1)(a), for “paragraph 3” substitute “paragraph 3(1)”;
in sub-paragraph (2), for “paragraph 3” substitute “paragraph 3(1)”.
In paragraph 38 (right of landowner or occupier of neighbouring land to require removal of electronic communications apparatus), in sub-paragraph (3), for “paragraph 3(h)” substitute “paragraph 3(1)(h)”.
The amendments made by this section do not affect any rights conferred before the coming into force of this section by an agreement under Part 2 of the electronic communications code.
Schedule 2 to the Digital Economy Act 2017 (the electronic communications code: transitional provision) is amended as follows.
In the italic heading before paragraph 5, omit “, upgrading and sharing”.
In paragraph 5 (exclusion of assignment etc provisions)—
in sub-paragraph (1), for the words from the beginning to “apparatus)” substitute “Paragraph 16 of the new code (assignment of code rights)”, and
in sub-paragraph (2), for “Part 3” substitute “Paragraph 16”.
After paragraph 5 insert—
The electronic communications code is amended as follows.
In paragraph 15 (introductory), in paragraph (b), for the words “to which such an agreement relates” substitute which—.
After paragraph 17 insert—
In paragraph 24 (determination of consideration for agreement), in sub-paragraph (3)(b), for “and 17” substitute “, 17 and 17A”.
Paragraph 74 of the electronic communications code (power to fly lines) is amended as follows.
This paragraph applies where an operator (“the main operator”) keeps electronic communications apparatus on or over any land for the purposes of the main operator’s network.
In sub-paragraph (2)—
before “operator” insert “main”, and
in paragraph (a), after “apparatus” insert “mentioned in sub-paragraph (1)”.
With the agreement of the main operator, another operator has the right, for the statutory purposes, to install and keep lines which—
In sub-paragraph (3)—
for “Sub-paragraph (2) does” substitute “Sub-paragraphs (2) and (2A) do”, and
in paragraph (a), for “sub-paragraph (2)” substitute “either of those sub-paragraphs”.
The main operator has the right to upgrade, or carry out works to, the apparatus mentioned in sub-paragraph (1) for the purposes of, or in connection with— With the agreement of the main operator, another operator has the right to upgrade, or carry out works to, the apparatus mentioned in sub-paragraph (1) for the purposes of, or in connection with, the exercise by the other operator of the right conferred by sub-paragraph (2A). Sub-paragraphs (3A) and (3B) do not authorise an operator to upgrade, or carry out works to, the apparatus mentioned in sub-paragraph (1) if the upgrade or works would— An operator may not enter the land on or over which the apparatus mentioned in sub-paragraph (1) is kept for the purpose of exercising a right conferred by this paragraph without the agreement of the occupier of the land.
In paragraph 77 (when and by whom a right to object under Part 12 of the code can be exercised), in sub-paragraph (3), for “paragraph 74” substitute “paragraph 74(2) or (2A)”.
The Landlord and Tenant Act 1954 is amended as follows.
After section 34 insert—
In section 24C (amount of interim rent where new tenancy of whole premises granted and landlord not opposed)—
in subsection (3), in paragraph (b)—
after “section 34” insert “or 34A”;
after “of this Act” insert “(as the case may be)”;
in subsection (4)—
after “section 34” insert “or 34A”;
after “of this Act” insert “(as the case may be)”;
in subsection (7), after “of this Act” insert “, or (as the case may be) subsections (2) to (4) of section 34A of this Act,”.
In section 24D (amount of interim rent in any other case), in subsection (2), after “of this Act” insert “, or (as the case may be) subsections (2) to (4) of section 34A of this Act,”.
In section 34 (rent under new tenancy), after subsection (4) insert—
The Business Tenancies (Northern Ireland) Order 1996 (S.I. 1996/725 (N.I. 5)) is amended as follows.
In Article 18 (rent under new tenancy), after paragraph (5) insert—
After Article 18 insert—
After section 34A of the Landlord and Tenant Act 1954 (inserted by section 61) insert—
The Business Tenancies (Northern Ireland) Order 1996 (S.I. 1996/725 (N.I. 5)) is amended as follows.
After Article 18A (inserted by section 62) insert—
In Article 42 (enforcement of orders of Lands Tribunal), in paragraph (1), after “18(5),” insert “18B(2),”.
In section 63 of the Landlord and Tenant Act 1954 (jurisdiction of court for purposes of Parts 1 and 2), after subsection (2) insert—
The electronic communications code is amended as follows.
After paragraph 27 insert—
In paragraph 21 (test to be applied by the court in determining whether to make an order under paragraph 20), in sub-paragraph (1), before “, the court may make an order” insert “and paragraph 27ZA”.
In paragraph 26 (power of court to make an order imposing interim code rights), in sub-paragraph (3), at the beginning insert “Subject to paragraph 27ZA,”.
In paragraph 27 (power of court to make an order imposing temporary code rights), in sub-paragraph (2), at the beginning insert “Subject to paragraph 27ZA,”.
In the electronic communications code, after Part 4 insert—
The Schedule contains consequential amendments.
Paragraph 35 of the electronic communications code (arrangements pending determination of an application under paragraph 32 or 33) is amended as follows.
In sub-paragraph (2)—
at the end of paragraph (a) insert “or”, and
omit paragraph (c) (and the “or” preceding it).
The operator or the site provider may apply to the court for— An order under sub-paragraph (2A)(a) may provide for the order to have effect from the date of the application for the order.
In sub-paragraph (3), for “under sub-paragraph (2)(c)” substitute “referred to in sub-paragraph (2A)(a)”.
In determining whether to make an order under sub-paragraph (2A)(b), the court must have regard to all the circumstances of the case, and in particular to—
In the italic heading before paragraph 35, omit “for payment”.
The electronic communications code is amended as follows.
In paragraph 20 (power of court to impose agreement)—
The notice must also—
Before applying for an order under this paragraph, the operator must, if it is reasonably practicable to do so, consider the use of one or more alternative dispute resolution procedures to reach agreement with the relevant person. The operator or the relevant person may at any time give the other a notice in writing stating that the operator or the relevant person (as the case may be) wishes to engage in alternative dispute resolution with the other in relation to the agreement sought by the operator.
In paragraph 32 (effect of notice to terminate an agreement)—
The counter-notice must also—
Before applying under sub-paragraph (1)(b) for an order under paragraph 34 the operator must, if it is reasonably practicable to do so, consider the use of one or more alternative dispute resolution procedures to reach agreement with the site provider. The operator or the site provider may at any time give the other party to the agreement a notice in writing stating that the operator or the site provider (as the case may be) wishes to engage in alternative dispute resolution with the other party to the agreement in relation to the site provider’s notice under paragraph 31.
In paragraph 33 (modifying the terms of an expired agreement)—
Where the notice is given by an operator, it must also—
Before applying under sub-paragraph (5) for an order under paragraph 34 the operator or the site provider (as the case may be) must, if it is reasonably practicable to do so, consider the use of one or more alternative dispute resolution procedures to reach agreement with the other party. The operator or the site provider may at any time give the other party to the agreement a notice in writing stating that the operator or the site provider (as the case may be) wishes to engage in alternative dispute resolution with the other party to the agreement in relation to the notice mentioned in sub-paragraph (1).
In paragraph 96 (award of costs by tribunal), in sub-paragraph (2)—
the wording after “in particular” becomes paragraph (a), and
at the end of that paragraph insert , and
In paragraph 103 of the electronic communications code (duty for OFCOM to prepare code of practice), in sub-paragraph (1), after paragraph (c) insert—.
In paragraph 95(1) of the electronic communications code (power to confer jurisdiction on other tribunals)—
in paragraph (a), at the end insert “or the Upper Tribunal”;
in paragraph (aa), for the words from “, but only” to the end substitute “or the Upper Tribunal”;
omit paragraph (b).
In Chapter 1 of Part 2 of the Communications Act 2003 (electronic communications networks and services), after section 119 insert—
The Communications Act 2003 is amended as follows.
After section 148 (powers of local authorities in connection with networks) insert—
In section 402 (power of Secretary of State to make orders and regulations), in subsection (2)(a), after “regulations under section” insert “148A or”.
The Secretary of State may by regulations make provision that is consequential on any provision made by this Part.
The power to make regulations under this section may, in particular, be exercised by amending, repealing, revoking or otherwise modifying any provision made by or under primary legislation passed before, or in the same session of Parliament as, this Act.
In this section “primary legislation” means—
an Act of Parliament;
a Measure or Act of the National Assembly for Wales or an Act of Senedd Cymru;
an Act of the Scottish Parliament;
Northern Ireland legislation.
Regulations under this section that amend or repeal any primary legislation are subject to the affirmative resolution procedure.
Any other regulations under this section are subject to the negative resolution procedure.
In this Part, “the electronic communications code” means the electronic communications code set out in Schedule 3A to the Communications Act 2003.
The Secretary of State may by regulations make such transitional or saving provision as the Secretary of State considers appropriate in connection with the coming into force of any provision of this Act.
Regulations under this section may (among other things) make any adaptations of any provisions of this Act brought into force that appear to be appropriate in consequence of other provisions of this Act not yet having come into force.
Any power of the Secretary of State to make regulations under this Act is exercisable by statutory instrument.
Regulations under this Act may—
make different provision for different purposes;
contain supplementary, incidental, consequential, transitional or saving provision.
Subsection (2) does not apply to regulations under section 79 (see instead subsection (3) of that section).
Where regulations under this Act are subject to the “negative resolution procedure” the statutory instrument containing the regulations is subject to annulment in pursuance of a resolution of either House of Parliament.
Where regulations under this Act are subject to the “affirmative resolution procedure” the regulations may not be made unless a draft of the statutory instrument containing them has been laid before Parliament and approved by a resolution of each House of Parliament.
Any provision that may be included in an instrument under this Act subject to the negative resolution procedure may be made by regulations subject to the affirmative resolution procedure.
Except as provided by subsection (2), this Act extends to England and Wales, Scotland and Northern Ireland.
Any amendment or repeal made by this Act has the same extent within the United Kingdom as the provision amended or repealed.
His Majesty may by Order in Council provide for any of the provisions of Part 1 or this Part (so far as relating to Part 1) to extend, with or without modifications, to—
the Isle of Man;
any British overseas territory.
The following provisions of this Act come into force on the day on which this Act is passed—
section 27;
sections 76 to 78, this section and section 80;
any power to make regulations under or by virtue of this Act.
The remaining provisions of this Act come into force in accordance with provision contained in regulations made by the Secretary of State.
Regulations under this section may make different provision for different purposes.
This Act may be cited as the Product Security and Telecommunications Infrastructure Act 2022.
Section 67
The Communications Act 2003 is amended as follows.
In section 402 (powers of Secretary of State to make orders and regulations), in subsection (2A), before paragraph (a) insert—.
Schedule 3A (the electronic communications code) is amended as follows. In paragraph 10 (persons bound by code rights)— In paragraph 12(2) (exercise of code rights), after “this Part” insert “, Part 4ZA”. In paragraph 19(a) (power of court to impose agreement), after “see also” insert “Part 4ZA and”. In paragraph 21 (test to be applied by the court)— In paragraph 23(2A) (terms of an agreement imposed under paragraph 20), after “an order under” insert “Part 4ZA or”. In paragraph 26 (interim code rights)— In paragraph 27G (expiry of Part 4A code rights), in sub-paragraph (4)— In paragraph 37(3) (landowner’s right to require removal of electronic communications apparatus), after paragraph (a) insert—. In paragraph 84(1) (compensation where agreement imposed or apparatus removed), after paragraph (a) insert—. In paragraph 108(1) (general interpretation), after the definition of “Part 4A code right” insert—.
after “placed on” insert “, under or over”;
for “have effect” substitute “be conferred on the operator by”.