Why the United States and EU Should Seize the Moment to Cooperate on Cybersecurity Labeling for IoT Devices

The United States and EU should align their respective approaches to cybersecurity labeling for IoT products—the U.S. Cyber Trust Mark and the EU’s Cyber Resilience Act (CRA)—via technical standards and potentially a mutual recognition agreement (MRA). This is exactly the type of early and proactive regulatory engagement that the United States and EU set out to do under the Trade and Technology Council (TTC).

An aligned EU-U.S. approach would allow firms to only test once in order to comply with both systems. Cooperation on IoT cybersecurity labeling would avoid creating yet another regulatory point of conflict in the transatlantic trade and technology relationship.