Federal Communications Commission	DA 26-18


DA 26-18
January 6, 2026

PUBLIC SAFETY AND HOMELAND SECURITY BUREAU ANNOUNCES 15-BUSINESS DAY FILING WINDOW FOR LEAD ADMINISTRATOR APPLICATIONS UNDER THE 
U.S. CYBER TRUST MARK PROGRAM

PS Docket No. 23-239

By this Public Notice, the Federal Communications Commission’s (FCC or Commission) Public Safety and Homeland Security Bureau (Bureau) announces a 15-business day filing window for applications from entities seeking designation as the Lead Administrator, which will open on January 7, 2026 and close January 28, 2026. While the Bureau may open additional filing windows at later dates, the Bureau will not accept applications for this round of applications that are filed after this filing window closes.  However, applicants requiring additional time may, in accordance with Section 1.46 of the Commission’s rules, request an extension of time for up to 10 additional calendar days to complete their applications.  47 CFR § 1.46.

In March 2024, the Commission established a framework for a voluntary cybersecurity labeling program for consumer wireless Internet of Things (IoT) products (U.S. Cyber Trust Mark Program), which includes selecting third party administrators to support the program. Cybersecurity Labeling for Internet of Things, PS Docket No. 23-239, Report and Order and Further Notice of Proposed Rulemaking, 39 FCC Rcd 2497, 2522, para. 48 (2024) (IoT Labeling Order).
  In September 2024, the Bureau opened an initial filing window on delegated authority from the Commission for applications from entities seeking authority to be recognized as a Cybersecurity Label Administrator (CLA) and as the Lead Administrator. See Public Safety and Homeland Security Bureau Announces 15-Day Filing Window for Cybersecurity Labeling Administrator and Lead Administrator Applications Under the Cybersecurity Labeling for Internet of Things Program, PS Docket No. 23-239, Public Notice, DA 24-900 (Sept. 10, 2024) (Initial Filing Window Public Notice); IoT Labeling Order, 29 FCC Rcd at 2532, para. 64.  CLA responsibilities and additional Lead Administrator responsibilities are outlined in the IoT Labeling Order.  39 FCC Rcd at 2523-25, paras. 52-53; 47 CFR §§ 8.220, 8.221.  
  Thus far, the Bureau has conditionally approved 11 CLAs and approved UL LLC (UL Solutions) as Lead Administrator. Public Safety and Homeland Security Bureau Announces Conditionally Approved Cybersecurity Labeling Administrators for the Internet of Things Cybersecurity Labeling Program, PS Docket No. 23-239, Public Notice, DA 24-1241 (Dec. 11, 2024); Public Safety and Homeland Security Bureau Selects UL LLC to serve as Lead Administrator of the Internet of Things Cybersecurity Labeling Program, PS Docket No. 23-239, Public Notice, DA 12-1214 (Dec. 4, 2024).
  UL Solutions withdrew as Lead Administrator effective December 19, 2025. Letter from Chanté Maurio, VP and GM, Identity Management and Security, UL Solutions, to Zenji Nakazawa, Public Safety and Homeland Security Bureau Chief, FCC, PS Docket No. 23-239 (filed Dec. 19, 2025).

Accordingly, the Bureau is now opening a new filing window for applications for Lead Administrator. The IoT Labeling Order delegated authority to the Bureau to select the Lead Administrator from among the CLAs, to manage changes in the Lead Administrator, and to open additional application filing windows for authority to be recognized by the Bureau as a CLA, as necessary.  IoT Labeling Order, 29 FCC Rcd at 2523, 2532, paras. 51, 64.
  The Bureau outlined the format of CLA and Lead Administrator applications, and the process for Bureau selection of these administrators, among other issues, in its September 2024 Initial Filing Window Public Notice. Initial Filing Window Public Notice at 2-15, paras. 3-32 (setting forth the format, filing fees, and selection process for CLA and Lead Administrator applications, as well as Lead Administrator cost-sharing among the CLAs, guardrails for Lead Administrator neutrality, and confidentiality and security requirements).
  The Bureau also provided guidance for who may apply and the relevant application procedures. Initial Filing Window Public Notice at 15-21, paras. 33-41.
  Applicants for Lead Administrator are advised to follow the same instructions, including the general filing instructions, provided in the Initial Filing Window Public Notice, as well as the additional guidance on confidential filing requirements published in October 2024. Initial Filing Window Public Notice at 24, Appx A; Public Safety and Homeland Security Bureau Provides Additional Guidance on Confidential Filing Requirements for Cybersecurity Label Administrator and Lead Administrator Applications Under the Cybersecurity Labeling for Internet of Things Program, PS Docket No. 23-239, Public Notice, DA 24-1037 (Oct. 3, 2024).

After the application filing window closes on January 28, 2026, the Bureau will review and evaluate properly filed applications. The Bureau may request clarifying information from applicants in its review, as needed.
  The Bureau’s selection of Lead Administrator will be announced by public notice.
People with Disabilities
To request materials in accessible formats for people with disabilities (Braille, large print, electronic files, audio format), send an e-mail to fcc504@fcc.gov or call the Consumer & Governmental Affairs Bureau at 202-418-0530 (voice).
Additional Information
 For further information regarding this proceeding, please contact Drew Morin, Deputy Division Chief, Cybersecurity and Communications Reliability Division, Public Safety and Homeland Security Bureau by email to Drew.Morin@fcc.gov or Tara B. Shostek, Attorney Advisor, Cybersecurity and Communications Reliability Division, Public Safety and Homeland Security Bureau at (202) 418-8130 or Tara.Shostek@fcc.gov.
Privacy Act Statement
Authority.  The FCC is authorized to collect the information pursuant to the authority contained in sections 1, 2, 4(i), 4(n), 302, 303(r), 312, 333, and 503, of the Communications Act of 1934, as amended, 47 U.S.C. §§ 151, 152, 154(i), 154(n), 302a, 303(r), 312, 333, 503; the IoT Cybersecurity Improvement Act of 2020, 15 U.S.C. § 278g-3a to § 278g-3e.
Purpose.  The information collected in this Application includes contact and certification information from entities voluntarily applying to serve as Lead Administrator in this FCC program.  The information is used to communicate with such entities and enforce their compliance with statements made in their applications.
Routine Uses.  While Lead Administrator applications will be presumed confidential, in addition to those disclosures generally permitted under 5 U.S.C. § 552a(b) of the Privacy Act of 1974, as amended, the FCC may disclose contact and certification information collected from applicants as is determined to be relevant and necessary, outside the FCC as a routine use pursuant to 5 U.S.C. § 552a(b)(3), including: to authorized third parties to administer, support, participate in, or receive information related to FCC programs and activities; to other Federal agencies in order to administer, support, participate in, or receive information related to FCC programs and activities; and to non-federal personnel, including contractors, who have been engaged to assist the FCC in the performance of a contract service, grant, cooperative agreement, or other activity related to this system of records and who need to have access to the records in order to perform their activity.
A full, detailed list of the routine uses is published in the system of records notice associated with this collection, FCC-2, Business Contacts and Certifications, which is available at https://www.fcc.gov/sites/default/files/sor-fcc-2.pdf.
Disclosure.  This information collection is voluntary.  The Public Safety and Homeland Security Bureau’s Public Notice provides entities the opportunity to apply to be designated a Lead Administrator.
2