The UK government has just started a public consultation on "proposals for new mandatory industry requirements to ensure consumer smart devices adhere to a basic level of security. The proposals set out in this consultation seek to better protect consumers’ privacy and online security which can be put at risk by insecure devices." Further details, including the draft regulatory proposals, can be found here: https://www.gov.uk/government/consultations/consultation-on-regulatory-propo... The deadline for responses is June 5th. If there's sufficient interest from the WG, I suppose we could formulate and submit a response. However, it may well be the amount of cat-herding that'll be needed to reach a consensus view could make this impractical. Irrespective of what the WG thinks/does, I encourage anyone who has something useful to say to respond to the consultation - either in a personal capacity or on behalf of their employer.