Gadgets, reviews and buying guides
explainer

Smart Home Security Update Commitments: Statutory PSTI Disclosures and Philips Hue Policies

Short answer

An analysis of statutory smart home security update disclosures under the UK PSTI regime alongside documented Philips Hue timelines, prerequisites, and operational limits.

Research-based

Last verified:

Applies to: UK PSTI consumer connectable product regime effective 29 April 2024; Philips Hue support policy covering Bridge v2, Hue lights, devices, accessories, mobile apps and Hue Sync TV app.

Comparison of UK PSTI disclosure duties and Philips Hue support commitments

Smart home devices depend on regular software updates to address security vulnerabilities and preserve network integrity. In practice, requirements for smart home support stem from two distinct sources: statutory transparency regimes such as the UK Product Security and Telecommunications Infrastructure (PSTI) framework, and individual manufacturer end-of-support policies. Statutory frameworks mandate public disclosure of minimum update periods, while manufacturer policies govern specific update types, conditional dependencies, and operational limits.

Statutory Disclosure Under the UK PSTI Regime

The UK consumer connectable product security regime took effect on 29 April 2024 under two legal instruments: Part 1 of the Product Security and Telecommunications Infrastructure Act 2022 and The Product Security and Telecommunications Infrastructure (Security Requirements for Relevant Connectable Products) Regulations 2023. This framework places duties on manufacturers, importers, and distributors of relevant connectable products (defined as internet-connectable or network-connectable products that are not excepted).

The regime mandates specific transparency and compliance disclosures:

  • Minimum Security Update Periods: Manufacturers must publish and make available to consumers the minimum length of time security updates will be provided, accompanied by an explicit end date. This information must be accessible, clear, transparent, free of charge, in English, and understandable to a reader without prior technical knowledge.
  • Statement of Compliance: Regulation 7 requires that a statement of compliance include all information specified in Schedule 4 of the regulations. Manufacturers must produce this document and ensure it accompanies the product. Under Sections 15 and 22 of the Act, importers and distributors must not make a product available unless accompanied by a statement of compliance. Manufacturers and importers must also retain copies under Regulations 8 and 9.
  • Vulnerability Reporting: Manufacturers must provide accessible, free-of-charge information on how to report security issues, including expected timescales for receipt acknowledgment and status updates until resolution.
  • Regulatory Enforcement: The Office for Product Safety and Standards (OPSS), operating under a Memorandum of Understanding with the Department for Science, Innovation and Technology (DSIT), enforces the regime using risk-based and proportionate measures.

Documented Manufacturer Commitments: Philips Hue Case Study

While statutory regimes require clear declarations of minimum update timelines and end dates, commercial policies define the specific categories of updates and their prerequisites. The published Philips Hue End of Support Policy by Signify documents distinct support durations and technical conditions from the date of purchase from an authorized reseller:

Product or Component Documented Update Commitment Stated Operational Conditions & Prerequisites
Philips Hue Bridge (v2) Major platform software updates (if any) for a minimum of 1 year; required security, quality, and interoperability updates, plus online service and mobile app compatibility, for a minimum total of 3 years. Must be connected to a router with internet access and used with the official mobile app. 1-year major update commitment is subject to hardware capability. Online service compatibility is maintained for the last 3 released software versions (unless important security updates require narrower limits). Mobile app compatibility requires the Bridge to run the latest software version at all times.
Philips Hue Lights, Devices & Accessories (excluding Bridge) Major platform software updates (if any) for a minimum of 1 year; required security, quality, and interoperability updates, plus compatibility with online services, latest Hue Bridge (when applicable), and latest mobile app version, for a minimum total of 5 years. Must be connected to the official Philips Hue mobile application with an internet connection. Commitments to major updates apply except where hardware or system capability is lacking.
Philips Hue Sync TV App Required security, quality, and interoperability updates, plus compatibility with the latest Hue Bridge and mobile app versions, for a minimum total of 5 years. Available on 2022 and newer Samsung QLED TVs in the Q60 or higher range. TV must be connected to the internet with automatic updates enabled and running the latest TV software. Bridge must run the latest software version. Signify disclaims responsibility for third-party TV updates that impede functionality.
Philips Hue Mobile Applications Aims to support mobile apps on at least the last 2 major revisions of iOS and Android. New versions introduced regularly. Signify reserves the right to retire an app if its standalone functionality is no longer relevant, announcing retirements 3 months in advance on its support page. Retired apps are discontinued from download.
Direct Wi-Fi Hardware (HDMI Sync Box & Camera) Automatic updates to latest software version. Directly connected to Wi-Fi; must be kept up to date to maintain compatibility with official mobile applications.

Signify’s policy also records specific hardware lifecycle transitions. The Philips Hue Bridge v1 reached end of support on 30 April 2020, at which point software updates and online service compatibility terminated (leaving local control via its dedicated app). The Hue Bridge v1 mobile app reached end of support on 30 April 2022, and the Hue Sync mobile app followed on 11 July 2023. Active support continues for the Hue Bridge v2, all Hue-branded lights, accessories, camera and HDMI devices, and the Hue Sync TV app.

Operational Boundaries and Post-Commitment Terms

The supplied documentation defines clear operational boundaries between legal requirements and technical delivery:

  • Hardware Constraints: Commitments to deliver major platform updates for at least one year are explicitly subject to hardware and system capability.
  • Version Dependencies: For the Hue Bridge, online service compatibility is maintained only across the last three released software versions, except where important security updates require tighter constraints. Official mobile app compatibility requires the Bridge to remain on the latest version.
  • Third-Party Dependencies: Software running on third-party hardware, such as the Hue Sync TV app on Samsung QLED TVs, depends on the host operating system. Signify disclaims responsibility for third-party software updates or omissions that disrupt app functionality.
  • Discretionary Support After Expiration: After stated minimum commitment periods lapse (such as 3 years for the Bridge, or 5 years for lights, accessories, and the Sync TV app), continuing software updates and compatibility services remain entirely at Signify’s discretion.
Comparison of Philips Hue support terms by product group

Text version of the diagrams

  • Two Layers of Support: UK PSTI — Minimum periods and end dates; Hue policy — Updates and compatibility terms; Reader check — Scope, conditions, dependencies
  • Hue Support by Product: Bridge v2 — 3 years; latest software; Lights/devices — 5 years; app and internet; Sync TV app — 5 years; TV dependencies

Research Scope and Limitations

This article was prepared solely from the supplied public source excerpts: the UK Government policy paper on the PSTI regime and Signify’s Philips Hue End of Support Policy document. Material limitations in the available evidence include truncated source excerpts for both documents. Specifically, the supplied excerpts verify that Signify commits to a minimum of one year of major platform software updates (subject to hardware capability) and a minimum total of five years of required security, quality, and interoperability updates (plus online service and mobile app compatibility) for Philips Hue lights, devices, and accessories from the date of purchase from an authorized reseller. No Google Nest documentation or accessible competing market coverage was provided in the source dataset, so multi-brand comparisons and competitive claims are omitted. This analysis does not reflect hands-on testing, hardware benchmarking, or laboratory measurements.

Related stories