“Manufacturers of smart microwaves, light bulbs, and other connected devices will face new security requirements in California and Oregon next year,” Reports Sara Merken for Bloomberg Law.
“The two states are the first ones to specifically regulate the security of internet of things devices, with laws taking effect Jan. 1. Other states are likely to follow.”
“The laws include different definitions for connected devices. California’s law applies to any device or object that connects directly or indirectly to the internet and is assigned an internet protocol or Bluetooth address. The Oregon law similarly covers devices or objects with those requirements, but only those that are used ‘primarily for personal, family, or household purposes.'”
“Connected devices sold in California and Oregon will have to be equipped with reasonable security features that are appropriate to the device’s nature, function, and data it collects or transmits, and be designed to protect the device and the information from unauthorized access, use, or disclosure.”