With the characteristic of “Internet of Everything,” IoT devices have a broader attack surface and window for network security compared to traditional IT internet; this shifts our focus from traditional functional safety to network security, data security, and privacy protection. In conjunction with the current European cybersecurity project, we will outline the relevant laws and regulations from major countries and regions.European UnionEU RED Directive on Network Security New DA EU 2022/30General Data Protection Regulation (GDPR)EU Cyber Resilience Act (CRA)EU Cybersecurity ActConsumer IoT Product Security Technical Standard: ETSI EN303 645ChinaCybersecurity Law of the People’s Republic of ChinaData Security Law of the People’s Republic of ChinaPersonal Information Protection Law of the People’s Republic of ChinaRegulations on the Management of Security Vulnerabilities of Network ProductsUnited Kingdom

Product Security and Telecommunications Infrastructure Bill: PSTI

UK General Data Protection Regulation: UK-GDPR

UK Smart Charging Points Regulations – Cybersecurity Requirements: Electric Vehicles (Smart Charge Points) Regulations 2021

United States

IoT Cybersecurity Improvement Act: H.R.1668

California Bills: SB 327/AB 1906

Oregon Bill: HB2395

Colorado Bill: SB21-190

Virginia Consumer Data Protection Act: CDPA

Connecticut: CTDPA

NISTIR 8259 Series Standards

NISTIR 8425

Canada

Personal Information Protection: PIPEDA

Australia & New Zealand

Australia Cyber Security Rules 2025

New Zealand Data Protection Act: Privacy Act Amendments: GDPR-like

Egypt

Personal Data Protection Law: Resolution No.151 of 2020

Brazil

Cybersecurity Requirements Act: Act 77-2021

CPE Device Cybersecurity Requirements: Act 2436/2023

General Data Protection Law: Lei Geral de Proteção de Dados Pessoais (LGPD)

South Africa

Personal Information Protection Law: POPIA

Singapore

Security Requirements for Cellular Devices to Prevent Network Storms: IMDA TS CD-SECCybersecurity Labeling Scheme: CLS

Japan

Personal Information Protection Law: APPI

Argentina

Data Protection Law: PDPL/Convention 108

In conclusion: Screenshots were primarily sourced from official websites, and some were obtained from other links due to access restrictions.