The U.S. Department of Energy (DOE) announced on May 8, 2026, a new interoperability requirement for smart electricity meters entering the U.S. market — effective October 1, 2026. All smart meters and data concentrators integrated into Advanced Metering Infrastructure (AMI) systems must comply with UL 2735 Second Edition, including mandatory cybersecurity firmware validation and remote firmware upgrade audit capabilities. Exporters of energy metering instruments — particularly those based in China, which accounts for 70% of global production capacity — must now align with this standard. Distributors and OEMs supplying to U.S. utilities should assess technical readiness and delivery flexibility accordingly.

Event Overview

On May 8, 2026, the U.S. Department of Energy issued a formal notice stating that, beginning October 1, 2026, all smart meters and associated data concentrators deployed within AMI systems in the United States must be certified to UL 2735 Second Edition. The updated standard explicitly requires verification of secure firmware execution and inclusion of an auditable remote upgrade module. This requirement applies to devices manufactured or imported for connection to U.S. utility-operated AMI networks.

Industries Affected

Direct Exporters and Trade Enterprises

Companies exporting smart meters or data concentrators from China to U.S. utilities face immediate compliance pressure. Since China supplies approximately 70% of global metering instrument capacity, many exporters lack existing UL 2735-2 certification — especially for firmware-level security features. Impact manifests as delayed shipments, retesting costs, and potential loss of tender eligibility if certification is not completed before the deadline.

Original Equipment Manufacturers (OEMs)

OEMs that do not yet implement Secure Element Provisioning Protocol (SEPP)-based chip solutions will encounter a technical compliance barrier. UL 2735-2’s firmware validation and remote upgrade audit requirements necessitate hardware-level cryptographic support and secure boot architecture — changes that cannot be achieved via software-only updates. Affected OEMs may need to revise bill-of-materials, engage new semiconductor suppliers, and extend development timelines.

Distribution and Channel Partners

U.S.-based distributors and system integrators serving utility clients must reassess supplier qualification status. Under the new rule, reliance on uncertified inventory becomes non-compliant for new deployments. Channel partners are required to verify certification documentation for each model line and adjust procurement lead times to accommodate testing and recertification cycles — particularly for products with pending SEPP integration.

What Relevant Enterprises or Practitioners Should Monitor and Do Now

Track official DOE and UL documentation updates

While the May 8, 2026 announcement confirms the effective date and scope, full implementation guidance — including acceptable test laboratories, certification validity periods, and grandfathering provisions for pre-October installations — remains pending. Stakeholders should monitor the DOE’s Federal Register notices and UL’s official bulletin updates for clarifications.

Confirm certification status per product family, not just brand or manufacturer

UL 2735-2 certification is model-specific and includes firmware version dependencies. A vendor’s general compliance claim does not guarantee coverage for all SKUs. Enterprises should request dated, model-level UL certification reports — not self-declarations — and cross-check them against UL’s Online Certifications Directory.

Distinguish between policy signal and operational impact

The rule applies only to new AMI deployments or replacements connected to utility-managed networks after October 1, 2026. It does not retroactively invalidate existing fielded meters or affect non-AMI applications (e.g., industrial submetering without utility telemetry). Businesses should map current contracts and delivery schedules to identify which orders fall under the new requirement.

Initiate internal technical gap assessment and supplier alignment

Manufacturers and importers should conduct an internal review of firmware architecture, secure boot mechanisms, and remote update logging functionality against UL 2735-2 Annex D and E requirements. Concurrently, initiate dialogue with existing suppliers to determine SEPP chip availability, lead times, and minimum order quantities — especially for vendors relying on legacy MCU platforms without hardware trust anchors.

Editorial Perspective / Industry Observation

Observably, this regulation marks a shift from functional interoperability toward enforceable cybersecurity accountability in U.S. grid-edge devices. Analysis shows it is less a sudden technical pivot and more a codification of emerging utility procurement expectations — many major U.S. utilities had already begun requesting UL 2735-2-aligned features in RFPs since early 2025. From an industry perspective, the rule functions primarily as a compliance gatekeeper rather than a technology mandate: it does not prescribe specific cryptographic algorithms or chip vendors, but requires verifiable evidence of secure firmware lifecycle control. Current monitoring should focus on how certification timelines interact with utility capital planning cycles — particularly whether Q4 2026 deployment windows will compress testing and approval capacity at accredited labs.

This directive signals growing regulatory emphasis on embedded device security in critical infrastructure, but its near-term effect remains constrained to new AMI procurements in the U.S. market. It is not yet indicative of harmonized global requirements, nor does it extend to non-utility metering segments such as commercial building management or distributed energy resource monitoring.

Conclusion

The DOE’s UL 2735-2 enforcement represents a targeted, jurisdiction-specific compliance milestone — not a broad-based industry transformation. Its significance lies in raising the baseline for firmware security validation in U.S. smart meter deployments, thereby affecting supply chain planning, product development roadmaps, and channel qualification processes for exporters and OEMs. Currently, it is best understood as a binding technical gate for market access, not a de facto global standard — and its operational impact remains contingent on timely certification execution and utility adoption pacing.

Source Attribution

Main source: U.S. Department of Energy (DOE) official notice dated May 8, 2026.
Additional reference: UL Standard UL 2735, Second Edition (2026), publicly available through UL Standards & Engagement.
Note: Certification lab accreditation scope, transition provisions, and utility enforcement protocols remain under observation and are subject to further DOE or NIST guidance.