On November 5, 2025, Japan's Ministry of Economy, Trade and Industry and the UK Department of Science, Innovation and Technology signed a Mutual Recognition Agreement (MRA) for cybersecurity testing and certification. Under the Mutual Recognition Agreement:

• Products that have passed PSTI cybersecurity certification and provide online self-declaration can be considered to have met the technical requirements of JC-STAR Level 1 when applying for JC-STAR Level 1, and will adopt a simplified procedure.
• Products that have passed the JC-STAR Level 1 evaluation and have adopted the certification mark can be considered to meet the requirements of PSTI.

Click this link to view the original text of the relevant mutual recognition agreement.

On March 25, 2025, Japan's Ministry of Economy, Trade and Industry (METI) and the Information Technology Promotion Agency (IPA) announced the launch of the Japan Cybersecurity Technology Assessment Requirements (JC-STAR) voluntary certification label program. This program applies to Internet of Things (IoT) devices that can use IP to send and receive data over the internet, as well as IoT devices that are indirectly connected to the internet. The program is divided into four product categories, STAR-1 and STAR-2 labels can be granted through self-declaration, and STAR-3 and STAR-4 labels are awarded after third-party laboratory testing and evaluation.

The JC-STAR label contains a QR code that links to the labeled product's website via IPA with details such as supplier information, product information, label information, safety information (any updates or vulnerabilities to the product), and contact information. An example of a label that contains a QR code is as follows:

The JC-STAR STAR-1 label is valid for 2 years, and the IPA will publish a list of labeled products in early May 2025. Conformance standards are currently being developed for STAR-2, STAR-3 and STAR-4 products.

Click this link to view the original METI announcement.