Most IoT companies see public decision processes — law and norms — as a black box for read-only. Although organizing a huge and long lobbying campaign is likely to be both uncertain and expensive, it doesn’t mean you have to be disconnected from this world. The sooner you become aware of a future law or norm that may affect your business (positively or negatively), the more possibilities you have to adapt your strategy accordingly or even impact the decision-making.

To understand the subject better, we need to explain the different layers of regulating the law, the norm, and the standard:

• the government, parliament decide the law, any elected or representative institution (e.g., establishing the distance a 5G antenna can be installed from a house or a school)
• the norm is decided by a public, international (ISO), or national entity (e.g., establishing the wind speed a 5G antenna should be at before breaking)
• any other private entity decides the standard, generally, a group of companies, to ensure interoperability. (e.g., establishing the communication protocol an antenna should operate on to be usable by the terminals)

This is dramatically important for IoT because it touches on personal data regulations, security concerns, health, and the like. Each IoT device needs to fit in those criteria, and navigating in the jungle of laws, norms, and standards is particularly complex. So, below you’ll find the three types of actions you can set up in your IoT company to avoid surprises.

1. Stay Informed and Updates

The deployment of 5G networks, personal data regulations, security concerns (the use of drones, self-driven cars), among others, are the topics discussed in being regulated everywhere (and differently) in the world.

The decisions adopted in the EU will have a huge impact on the ways IoT is — and will be — commercialized in the upcoming years. It would definitely help if you were up-to-date with new regulations, or the consequences for your business may be devastating.

First, you need to understand who the decision-makers are. We can divide them into the lawmakers (the frame) called legislators and norm-makers (technical aspects, ISO certification requirements). For the European market, the lawmakers are by order of apparition (in the very simplistic way):

• the European Commission (which proposes a directive)
• the European Parliament and European Council (which votes it)
• A national parliament (which implements it in the country, with some adaptations).

One must bear in mind that this entire process takes years, is extremely organized, and the decisions are published and accessible online. At each step, the content is being modified. Thus, there’s a long way between an initial provision prepared by the European Commission and its final version adopted in each European country. That’s why you need to keep your finger on the pulse all along the process.

Then there are so-called “norm makers”, appointed by the industry actors:

• ISO
• CEN (European Committee for Standardization)
• all the national certified entities (norms adopted nationally can’t be less demanding but can be stricter)

Standards makers, appointed by the industry actors:

• ETSI (European Level)
• ONEM2M (International Level)

To follow actions taken by those different entities, there are several ways (from the cheapest to the most expensive):

• on your own: set up the Google alerts with the chosen keywords, review their agenda, reports, publications
• hire a monitoring agency who is going to do it for you and send you a monthly report
• hire a dedicated public affairs specialist in your team or outsource one

2. Don’t Be a Spectator

Professional Representation

A lot of organizations are created to protect the interests of their clients and ensure system interoperability in Europe, for example, among others:

• AIOTI (created by the European Commission )
• IoT-EPI
• NGIoT
• IoT Council

Each IoT company should join at least one of these professional federations and organizations. The membership fees are affordable, and you can participate in their numerous events, where you can follow the evolution of your sector and meet the people exhibiting common interests. Once you find yourself inside these organizations, you can actively participate in the deliverable recommendations then transmitted them to the European officers (who actually read them). The European Commission bases many of its decisions on those circles of experts you should be a part of.

Make Your Voice Heard

Media always look for experts, especially with the recent multiplication of news channels and web TVs. Write a blog or run the social media channels and publish content to explain your position (videos, blog posts, comments in a news article, petition, asking a question at a public conference). Contact the specialized media (web TV, bloggers, journalists, magazines) to refer to yourself as an expert in your field.

Moreover, thousands of events are organized by startup incubators, accelerators, coworking spaces, public organizations every year. For each of them, the event organizers are reaching out for speakers, so you get a microphone and the audience.

3. Being a Part of the Process

Law Level

The sooner you become aware of a European Directive project that can impact your business, the better chances you get to make a tangible impact. Very often, a Directive project is preceded by a public consultation. You can participate by giving your point of view or even meet in person with the European officials responsible for preparing the legal content.

If the provision you care about is already at the Parliament, you need to reach someone who can act on your behalf. Contact a parliamentarian attached to your district and ask him/her for support. If he or she’s not a specialist in new tech issues, he/she can refer you to someone who is (a member of his /her political party). It will be the same for the Mayor and his/her deputies.

You can also contact the influencer groups in your district (Rotary or Lions club, the Chamber of Commerce); and local media. The concept is to find the allies to bring your voice to the next decision-making level. Don’t hesitate to reach out to other companies in the same situation as yours. Forget the competition during lobbying campaigns.

Norm and Standard Levels

When it comes to norms and standards, you first need to be a member of one of the abovementioned organizations. You are a member who guarantees you a vote in plenary sessions and in the subgroups you are sitting in. Successively you have a direct influence on the decisions adopted.

Choose carefully who will represent your company in these organizations; you need someone trustworthy, with technical and public relations skills, who will be with you long-term. These are deeply strategic jobs.

Regulation in Summation

In conclusion, there are several aspects to consider when a new regulation will finally impact your business. When it comes to IoT, we are concerned every day by many aspects discussed nowadays.

First, you need to identify a new regulation impacting your business as soon as possible (years before it is effective) in order to blend this information into your strategy. Strategic monitoring is essential.

Secondly, be a part of IoT professional organizations that are better informed and speak out in your interest.

Thirdly, don’t be intimidated by politicians and reach out to them too. European officers are demanding expertise when preparing new regulations, local MPs or Mayors represent you and your activity. Start by meeting your district public decision-makers and move up the ladder unless you can directly meet someone who has the real decision-making power.

• Standards & Regulations

• Standards & Regulations