Cybersecurity, AI and Connected toys

There are a number of difficult areas to navigate when developing toys which connect to the internet or use predictive technology (AI). We have published a range of guidance to help members understand the factors they should consider when developing or distributing such products. These guides aim to help members consider issues from product design and function through to data use, privacy and security.

 UK Product Security Regulations 2023

The UK government has regulated consumer connectable products under the Product Security & Telecommunications Infrastructure (Security Requirements for Relevant Connectable Products) Regulations 2023. The new regime will come into effect on 29 April 2024.

UK Product Security Regulations - BTHA Guidance

Published 07 May 2024

 Artificial Intelligence Act

A comprehensive legal framework to regulate AI across the EU. The goal of the AI Act is to ensure that AI systems used in the EU are safe, ethical, and respect fundamental rights. This is part of the EU’s broader strategy to foster trust in AI technologies while ensuring innovation.

Artificial Intelligence Act - BTHA Fact Sheet

Published 28 Jan 2025

 Cyber Resilience Act

The Cyber Resilience Act seeks to establish a comprehensive legal framework for the cybersecurity of all digital products and connected devices in the EU. The regulation is designed to ensure that manufacturers and developers build and maintain secure products throughout their entire lifecycle.

Cyber Resilience Act - BTHA Fact Sheet

Published 28 Jan 2025

 Connected Toys

The BTHA has produced a guide to give an overview of the legal requirements and  potential risks associated with connected toys and ways in which to manage those risks.

Connected Toys - BTHA Guide

Published 28 Jan 2025

 Radio Equipment Directive (RED)

The RED (Radio Equipment Directive) 2014/53/EU establishes a regulatory framework for the marketing, operation, and compliance of radio equipment within the European Union. It includes specific requirements for the cybersecurity of toys incorporating a radio element (e.g. a Bluetooth tablet).

View BTHA RED Directive guidance