Official Letter 100/2024 Clarifications of the scope for cybersecurity testing for CPE equipment

Following up on the last news regarding ANATEL Act No. 2436/2023 for cyber security requirements for assessing the conformity of CPE (Customer Premises Equipment) enforced on March 10, 2024, ANATEL release Official Letter 100/2024 on March 20, 2024, with clarifications of the scope for cybersecurity testing for CPE equipment.

According to the scope contained in item 1.1 of the Annex of Act No. 2436/2023 , the requirements are applicable to CPE equipment used by the general public which connects subscribers to the Internet service provider's network.

According to the definition contained in the requirements, the general public is understood as any person who uses and/or has access to the product and who does not have specialized technical knowledge about the telecommunications equipment and who is only interested in using its functionalities and consuming the telecommunications services.

It is understood that equipment intended exclusively for corporative use is installed and configured by a professional team with specialized technical knowledge. Additionally, such equipment operates on corporative networks that have different layers of security and, for this reason, normally do not connect directly to the Internet service provider's network.

Considering these characteristics, ORCN (Anatel's Certification and Numbering Management) clarifies that the requirements approved by Act No. 2436/2023 are not applicable to CPE equipment intended exclusively for corporative use.

For more details, check the below link:

sei.anatel.gov.br/sei/modulos/pesquisa/md_pesq_documento_consulta_externa.php

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

01-29-2024

Letter No. 429/2023

ANATEL published the new Official Letter No. 429/2023 on Nov. 11, 2023, which reiterates that all testing reports (done in Brazil or abroad) must follow and meet the previous Act 4083 requirements, including the traceability information. 

Act 4083 stipulates in item 6.3.1.5 that before starting the testing either in Brazil or abroad, the manufacturer or applicant MUST formally report to the OCD (Certification Body) the following:

I - The manufacturing unit where the sample was produced; and

II - The traceability of the sample submitted for testing.

The most important point of new Official Letter No.429/2023 is that from now on, it will NOT be accepted testing report done abroad before the OCD’s pre-validation of the traceability and approval.

According to Act 7280, ANATEL accept foreign reports for some specific products, such as non-RF Network switch for corporative/ industrial use, OLT, Digital Multiplexer, Coaxial cables, some types of Optical cables, Satellite transceivers and some others.

Due to this new Official letter No. 429/2023, foreign laboratory MUST only start testing after OCD’s approval.

P.S.: It is mandatory for FCC (or CE) testing lab be ISO/IEC 17025 accredited since ANATEL only accept testing reports from accredited labs.

Please find the links of official documents as follows:

sei.anatel.gov.br/sei/modulos/pesquisa/md_pesq_documento_consulta_externa.php

informacoes.anatel.gov.br/legislacao/atos-de-certificacao-de-produtos/2020/1493-ato-7280

www.anatel.gov.br/legislacao/atos-de-certificacao-de-produtos/2020/1453-ato-4083

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

11-01-2022

Act. 13423 amends Act. 5159

Following up on the Act 5159 published on April 29, 2022 which updated testing requirements for Mobile Phone Charger, ANATEL published Act 13423 on October 14, 2022, which amends Act 5159.

According to the new Act 13423, the old Act 3481 will not be revoked until October 21, 2023, and the Act 5159 will be enforced after October 21, 2023.

Between October 26, 2022 and October 21, 2023, charger manufacturers can choose either the requirement approved by Act 3481/2019 (Old Act) or requirement approved by Act 5159/2022 (New Act).

See the official links for the regulations as below.

sei.anatel.gov.br/sei/modulos/pesquisa/md_pesq_documento_consulta_externa.php

informacoes.anatel.gov.br/legislacao/atos-de-certificacao-de-produtos/2022/1657-ato-5159

informacoes.anatel.gov.br/legislacao/atos-de-certificacao-de-produtos/2022/1746-ato-13423

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

08-08-2022

Official letter nº 265/2022 extend the time range of certificates’ validity date for renewal process

On July 26, 2022, ANATEL published the Official letter nº 265/2022 to extend the time range of certificates’ validity date for renewal process. Due to the remaining impact of COVID-19, ANATEL decided that all certificates with expiry date between March 6, 2020 and October 31, 2022 are exempt from doing renewal testing and providing new external/internal photos as long as the device does not suffer any modification.

Please see the official link as below:

sei.anatel.gov.br/sei/modulos/pesquisa/md_pesq_documento_consulta_externa.php

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

05-12-2022

ANATEL published the new Act. 5159 with testing requirements for Mobile Phone Charger on April 29, 2022. The new Act. will be enforced in 180 days (October 26, 2022) to replace the actual Act. 3481.

The main changes are as follows:

1) USB interfaces that integrate the electrical/electronic design do not requireANATEL approval (such as TV, computer, Multimedia central, etc.);

2) For Vehicular Chargers, the ESD tests must be applied in accordance with Item8.3 of ISO 10605/2008 (previously, it was referring to IEC 61000-4 Electrostaticdischarges must be applied to the following levels:

a)2 kV, 4 kV and 6 kV for contact discharges; and

b)4 kV, 6 kV and 8 kV for air discharges.

3) For Vehicular Chargers, the surge and transient immunity testing must beperformed in accordance with ISO 7637-2/2004;

4) For USB type built-in Vehicular Chargers, ANATEL will accept the ESD (ISO10605/2008), surge and transients (ISO 7637-2/2004) testing reports done in the 1stpart or 2nd part laboratory (manufacturer’s laboratory, for example). The laboratorymust be accredited by ILAC or evaluated by the certification body.

5) The use of Security Seal (MINT label) will be optional for built-in VehicularChargers sold along with the Vehicle. If the manufacturer chooses not to use theMINT label, the device must have the ANATEL marking in its label, such as ANATELID: HHHHH-YY-FFFFF;

6) Removal of safety testing for built-in Vehicular Chargers;

7) Removal of Voltage Dips/variation (IEC 61000-4-11) immunity testing.

To view the Act. please click on the link below:

sei.anatel.gov.br/sei/modulos/pesquisa/md_pesq_documento_consulta_externa.php

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

04-25-2022

Brazil ANATEL MINT label for built-in vehicle chargers will be optional

Brazil ANATEL released the draft Act. 7789242 on April 8, 2022, informing the MINT label for built-in vehicle chargers which will be optional according to item 9.1.1 in the draft Act.

Item 9.1.1. The Security seal described in the caput is optional for the built-in vehicle chargers supplied with the vehicle. However, the equipment must bear the identification of Anatel homologation in one of the forms provided for in the Operating Procedure for Marking the Identification of Anatel Homologation in Telecommunications Products.

Also, the Act. will be enforced after 180 days of its publication as mentioned below in Art. 3. Art. 3 This Act enters into force 180 (one hundred and eighty) days after its publication in Anatel's Electronic Service Bulletin. We will provide a further update once the ANATEL released the official new Act. later in the year. 

To view the draft Act. please click on the link below:

sei.anatel.gov.br/sei/modulos/pesquisa/md_pesq_processo_exibir.php

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

12-10-2021

Brazil- Renewal temporary guidance update

Following up on the last notice in May, 2021, ANATEL published the Official letter nº 233/2021 in November to extend the time range of certificates’ validity date for renewal process due to the remaining impact of COVID-19. ANATEL decided now all certificates with expiry date between March 6, 2020 and July 31, 2022, neither local testing nor external/internal photos are required as long as the device does not suffer any change.

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10-07-2021

Public consultation No. 47 to update Act 3481

Brazil authority, ANATEL, released the Public Consultation No. 47 to update the Act 3481 for requirements and testing procedures for mobile phone chargers.

The main changes are:

1. Security seal: MINT label will be optional used in vehicular chargers installed inside the car panel. This may eliminate the need of MINT labels for the vehicular chargers. In addition, if manufacturers decide not to use the MINT label, they will need to include the ANATEL ID in the charger label (regular marking).

2. Vehicular chargers: ESD testing will be performed according to ISO 10605/2008 instead of IEC 61000-4-2 as previous.

3. ESD (ISO 10605) and Electrical transient (ISO 7637-2) testing applied exclusively for USB type vehicular charger installed in the car panel or other parts of the vehicle. 

Please see the official link of the consultation No. 47:

SACP - ACOMPANHAMENTO DE CONSULTA PÚBLICA - [SIS versão 2.2.61] (anatel.gov.br)

The consultation is open for comments until November 7, 2021.

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

05-20-2021

Brazil- Renewal temporary guidance 

Following up on the last notice in December 2020, ANATEL published the Official letter nº 65/2021 on May 7, 2021, to extend the time range of certificates’ validity date for the renewal process due to the remaining impact of COVID-19. 

ANATEL decided now all certificates with an expiry dates between March 6, 2020, and December 31, 2021, neither local testing nor external/internal photos are required as long as the device does not suffer any change.