Japan: METI and IPA launch the JC-STAR IoT Cybersecurity Label


On March 25, 2025, Japan's Ministry of Economy, Trade and Industry (METI) and the Information Technology Promotion Agency (IPA) announced the launch of the Japan Cybersecurity Technology Assessment Requirements (JC-STAR) voluntary certification label program. This program applies to Internet of Things (IoT) devices that can use IP to send and receive data over the internet, as well as IoT devices that are indirectly connected to the internet. The program is divided into four product categories, STAR-1 and STAR-2 labels can be granted through self-declaration, and STAR-3 and STAR-4 labels are awarded after third-party laboratory testing and evaluation.

The JC-STAR label contains a QR code that links to the labeled product's website via IPA with details such as supplier information, product information, label information, safety information (any updates or vulnerabilities to the product), and contact information. An example of a label that contains a QR code is as follows:

label example for JC-STAR

The JC-STAR STAR-1 label is valid for 2 years, and the IPA will publish a list of labeled products in early May 2025. Conformance standards are currently being developed for STAR-2, STAR-3 and STAR-4 products.

Click this link to view the original METI announcement.