Artifact GuideUKImporter And Distributor Duties

UK PSTI Product Security Importer And Distributor Duties

Importer And Distributor Duties decisions under UK PSTI Product Security should be written in operational language: who is in scope, what must happen, what evidence proves it, and when escalation is needed.

Use this guide to turn official requirements into scope, evidence, owner, and review decisions. This guidance is practical, source-linked, and should be validated against current legal and policy requirements before implementation.

Back to main artifact Review sources

Author

Sorena AI

Published

May 9, 2026

Updated

May 9, 2026

Questions

Structured answer sets in this page tree.

Primary sources

Cited legal and guidance references.

Publication metadata

Sorena AI

Published May 9, 2026

Updated May 9, 2026

Overview

This page helps you determine which UK PSTI Product Security duties apply, who owns each action, required evidence, and the review path for escalation decisions.

Search this module

Find a question or answer quickly

3 of 3 questions

Question 1

What importer and distributor duties apply under UK PSTI Product Security?

Teams should treat importer and distributor duties under the UK PSTI Act as supply-chain controls, not abstract policy. Importers must not make a relevant connectable product available unless it is accompanied by a statement of compliance, and they must retain a copy of that statement; distributors must also not make the product available unless it is accompanied by a statement of compliance.

In practice, the importer should verify the product comes with the required statement of compliance and keep their copy on record, while the distributor should confirm that the product they make available is accompanied by that statement before sale or onward supply.

Importers: check the statement of compliance, keep a copy, and do not make the product available unless it is accompanied by the statement.
Distributors: do not make the product available unless it is accompanied by the statement of compliance.
If a compliance failure is found, manufacturers and importers must investigate and take action, and importers and distributors must notify OPSS and record the steps taken.

Citations

Consumer connectable product security regulations

Supports the UK PSTI duties requiring importers and distributors to check statement-of-compliance evidence before making products available.

The UK Product Security and Telecommunications Infrastructure (Product Security) regime

Supports the UK PSTI duties requiring importers and distributors to check statement-of-compliance evidence before making products available.

The UK Product Security and Telecommunications Infrastructure product security regime

Supports the UK PSTI duties requiring importers and distributors to check statement-of-compliance evidence before making products available.

Question 2

What evidence should teams keep for Importer And Distributor Duties under UK PSTI Product Security?

Useful evidence is not just a product-security policy. Keep the source, product facts, password and vulnerability-disclosure proof, support-period statement, supply-chain role mapping, and statement-of-compliance approval together.

Source URL and quote used for the decision.
Scope notes, screenshots, data-flow or system references, and role mapping.
Implementation ticket, approval record, exception notes, and review date.

Citations

The UK Product Security and Telecommunications Infrastructure (Product Security) regime

Evidence support for the FAQ answer.

The UK Product Security and Telecommunications Infrastructure product security regime

Evidence support for the FAQ answer.

The Product Security and Telecommunications Infrastructure Act 2022 (Commencement No. 2) Regulations 2023

Evidence support for the FAQ answer.

Question 3

Which mistakes create risk when handling Importer And Distributor Duties under UK PSTI Product Security?

The common failure pattern is using a generic IoT security claim without proving the PSTI product scope, exact responsible role, customer-facing support information, and statement-of-compliance record.

Using an old threshold, deadline, source page, or contract template without checking current source text.
Treating a source-linked exception as a general exemption for every product or data flow.
Publishing notices, controls, or answers that do not match the actual product behavior.

Citations

Consumer connectable product security regulations

Risk and boundary support for the FAQ answer.

The UK Product Security and Telecommunications Infrastructure (Product Security) regime

Risk and boundary support for the FAQ answer.

The UK Product Security and Telecommunications Infrastructure product security regime

Risk and boundary support for the FAQ answer.

The Product Security and Telecommunications Infrastructure Act 2022 (Commencement No. 2) Regulations 2023

Risk and boundary support for the FAQ answer.

Recommended next step

Turn UK PSTI Product Security Importer And Distributor Duties into assigned work

Use this UK PSTI Product Security guide to turn Importer And Distributor Duties into owners, evidence requests, review checkpoints, and reusable operating records inside Sorena.

Assessment workflow

Open Assessment Autopilot for UK PSTI Product Security

Turn Importer And Distributor Duties into scoped questions, evidence fields, and review tasks.

Explore next step

Research workflow

Review UK PSTI Product Security source evidence

Use Research Copilot to answer follow-up questions with cited source material.

Explore next step

Talk to Sorena

Talk through implementation

Review scope, evidence, owners, and the next compliance actions with Sorena.

Explore next step