What counts as a consumer IoT product under ETSI EN 303 645?
ETSI defines a as a network-connected or network-connectable device that has relationships to and is typically used by consumers in the home or as an electronic wearable. An is the consumer IoT device plus its associated services. Consumer devices do not leave scope merely because a business also uses them.
Examples include connected children's toys, baby monitors, smoke detectors, locks, window sensors, gateways, hubs, cameras, speakers, televisions, wearable health trackers, home automation and alarms, appliances, and smart home assistants. Devices primarily intended for manufacturing, healthcare, or other industrial applications are outside the document's scope.
- Start the scope note with the exact device or product family, its network connectivity, and the consumer use case. If the device is not network-connected or network-connectable, this EN 303 645 scope test ends.
- Include digital services that form part of the product and are typically required for its intended functionality, such as manufacturer cloud access, preconfigured telemetry, or a required companion app.
- Treat a user-chosen website or store-installed app as outside the associated-service boundary unless product-specific facts show that the manufacturer made it part of the intended product.
- Do not stretch the scope to a product primarily intended for industrial, manufacturing, or healthcare use merely because it connects to a network.
- If consumer and professional uses overlap, document the intended market, ordinary user, sales channels, instructions, and service configuration instead of treating business use alone as an exclusion.
Primary ETSI source for consumer IoT device, IoT product, associated services, examples, and out-of-scope industrial use.
Assessment source confirming that the methodology covers consumer IoT devices, their associated services, and corresponding relevant processes.