IN SHORT
The Situation: California is the first state to
specifically regulate the security of connective devices, which are
commonly referred to as internet of things ("IoT")
devices.
The Result: The new law mandates that
manufacturers that sell or offer to sell a connected device in
California equip the device with reasonable security features as
quantified in the law.
Looking Ahead: The new law takes effect on
January 1, 2020.
On September 28, 2018, California Governor Jerry Brown signed
legislation making California the first state to expressly regulate
the security of connective devices, which are commonly referred to
as internet of things ("IoT") devices. The new law takes
effect on January 1, 2020. In contrast to existing California data
privacy laws protecting only personal information, the new law aims
to protect the security of both IoT devices and any information
contained on IoT devices.
