ETSI Technical Committee on Cybersecurity (TC CYBER) publishes a new standard for IoT cybersecurity -ETSI EN 303 645. The standard is based on ETSI specification TS 103 645. The standard establishes a security baseline for IoT consumer devices, and it is designed to prevent attacks against smart devices. The standard defines 13 provisions for the security of IoT consumer devices such as universal default passwords, keeping software updates, and ensuring the security of personal data. The standard also includes five specific data protection provisions for IoT consumer devices.