The UK PSTI regime is narrow in some places and wider than expected in others.
The product definition captures direct and indirect connectivity paths, while the wider security obligation can still reach the surrounding software and services.
Structured answer sets in this page tree.
Cited legal and guidance references.
A relevant connectable product is not only a device with a direct internet connection. The Act also covers some network-connectable products that connect through other products. At the same time, exclusion analysis still matters, and the duty map must reflect the actual UK consumer channel.
Section 4 says condition A is met if the product is internet-connectable or network-connectable. Section 5 then defines those terms in more detail. That is why a gateway-dependent device can still be in scope even if it is not directly internet-capable on its own.
This matters for smart home and accessory ecosystems where the security risk sits in the combined product experience.
The Act makes clear that software and services connected to the operation or use of the product can sit inside the security requirement picture. That means a clean hardware-only analysis is often incomplete.
App accounts, update services, cloud control panels, and vulnerability intake pages all affect compliance.
Exclusion questions should be answered from the regulations, not from sales intuition. The current Schedule 3 list covers certain Northern Ireland products, EV smart charge points, medical devices, certain smart meter products, certain computers, and, since 25 February 2025, specified Great Britain motor vehicles, two- or three-wheel vehicles and quadricycles, and agricultural and forestry vehicles. Where a boundary is genuinely difficult, record the reasoning and keep a review trigger rather than leaving the decision informal.
This is especially important where one component is incorporated into a wider product or sold through multiple channels.
Research Copilot can take Relevant Connectable Products Scope from clarifying scope and applicability with cited answers to a reusable workflow inside Sorena. Teams working on Relevant Connectable can keep owners, evidence, and next steps aligned without copying this guide into separate documents.
Start from Relevant Connectable Products Scope and answer scope, timing, and interpretation questions with cited outputs.
Review your current process, evidence gaps, and next steps for Relevant Connectable Products Scope.