Last week, U.K. Digital Minister Margaret James announced that consultation had begun on potential legislation for IOT devices, including passwords that could not be reset to factory settings and a minimum length of time during which the device will continue to receive security updates.

Meanwhile, the Internet of Things Cybersecurity Improvement Act of 2019 was introduced to the U.S. Senate in March, the second attempt by lawmakers to place a cybersecurity standard on IoT devices purchased by government agencies. While the two countries are both looking to lead the way, it seems likely that the U.K. will get the first—and probably more rigorous—word in on IoT regulation.