Singapore and Japan Agree Mutual Recognition of IoT Cybersecurity Labels
Singapore and Japan have signed a Memorandum of Cooperation (MoC) to mutually recognise national cybersecurity labelling schemes for Internet-of-Things (IoT) devices. The agreement enables manufacturers whose products are certified in one country to apply for recognition in the other through a streamlined process. Announced by the Cyber Security Agency of Singapore (CSA) and Japan’s Ministry of Economy, Trade and Industry (METI), the arrangement aims to strengthen baseline security standards for connected devices while supporting cross-border trade. Full details were published by CSA in its official announcement.
Mutual recognition of national IoT labelling schemes
Under the MoC, Singapore’s Cybersecurity Labelling Scheme (CLS) and Japan’s JC-STAR scheme will be recognised by both governments. Smart devices that have already obtained a cybersecurity label in one jurisdiction will be eligible to seek the corresponding label in the other country without undergoing a full reassessment.
The arrangement applies to a range of consumer and home IoT products, including smart home assistants, home automation and alarm systems, and IoT gateways or hubs that connect multiple devices. The agreement is scheduled to take effect on 1 June 2026.
Implications for manufacturers and consumers
By reducing duplicative certification processes, the MoC is intended to lower compliance costs for manufacturers seeking access to both markets. For consumers, the mutual recognition of labels is expected to provide clearer assurance that connected devices meet recognised cybersecurity standards.
The agreement also reflects Singapore’s broader efforts to embed cybersecurity requirements across the digital ecosystem, complementing initiatives focused on raising cybersecurity standards for critical infrastructure and consumer technologies alike.
Singapore’s expanding network of international arrangements
Japan is the fifth country to enter into a mutual recognition arrangement with Singapore for IoT cybersecurity labelling. Previous agreements have been concluded with Finland, Germany, the Republic of Korea, and the United Kingdom. Finland’s scheme, however, was discontinued on 31 July 2025.
Since the launch of the CLS in 2020, CSA has received applications covering more than 1,000 products, including routers, smart lighting systems and smart cameras. The scheme is voluntary for most devices, although obtaining CLS Level 1 certification is mandatory for Wi‑Fi routers sold in Singapore.
Alignment with digital resilience objectives
The MoC with Japan aligns with Singapore’s wider digital policy objectives, which emphasise resilience, trust and international cooperation. These priorities are central to Singapore’s approach to building a resilient digital future, particularly as the number of connected devices in homes and workplaces continues to grow.
