FCC Launches Investigation Into Cyber Trust Mark Program
FCC Chairman Brendan Carr on Friday confirmed a report that the FCC is investigating participants in its voluntary cyber trust mark program for possible ties to China. Carr and all the other commissioners voted for the launch of the program in March 2024 (see 2403140034). It has been championed, in particular, by the Consumer Technology Association, which didn’t comment Friday.
Sign up for a free preview to unlock the rest of this article
Communications Daily is required reading for senior executives at top telecom corporations, law firms, lobbying organizations, associations and government agencies (including the FCC). Join them today!
“I can confirm that I have directed the FCC's Council on National Security to review a Biden-era cybersecurity program due to potentially concerning ties to the government of China,” Carr said Friday on X, reposting a Fox News report. “The FCC will remain vigilant when it comes to safeguarding our communications networks.” The FCC declined additional comment.
The report cited concerns about UL Solutions, designated as the lead administrator, and other companies participating in the program. UL Solutions declined to comment.
President Donald Trump recently issued an executive order mandating that by Jan. 4, 2027, all IoT devices sold to the government must carry the cyber trust mark (see 2506090044).
Former Commissioner Nathan Simington said in an email that all firms approved for the program appeared to be “reputable, long-established American and European institutions.” The FCC is correct that there can’t be Chinese influence “anywhere” in the program, he said. “Label administrators that certify in-house almost seem more likely to be compromised.”
Stacey Higginbotham, a policy fellow at Consumer Reports, raised concerns about the probe. “Previous investigations by CR, including one into a video doorbell device manufactured by a Chinese company, have highlighted the lack of proper security in some connected devices,” she said in an email. “We welcome scrutiny of the program, but are concerned that the FCC is throwing doubt on the credibility of the entire … program over concerns about Chinese testing labs and interference.”
Higginbotham, who served on committees that helped design the program, said the recommendations that UL turned in at the FCC for further review “are a good set of baseline security requirements that are backed by the [National Institute of Standards and Technology] framework and industry best practices.” Those concerned about Chinese interference should “read the framework and evaluate the recommendations for themselves,” she said