Darkreading.com reported that the new January 1, 2020 IoT
Security Law in California applies to companies “…that
make connected devices — from Internet routers to connected
thermostats to home-monitoring cameras…” The
Article entitled “California's IoT Security Law Causing
Confusion” included these comments:
The California law, Senate Bill 327, was approved by the
governor a year ago and requires that all connected devices sold in
the state— no matter where they are made — incorporate
"a reasonable security feature or features" that
appropriately protect the user of the product and the user's
data from unauthorized access, modification, or
disclosure.
The law specifies that single hard-coded passwords are not
allowed, and each device must either have a unique passcode or
require the user to generate a new passcode before using the device
for the first time.
