How many internet of things devices are predicted in the world by 2023? 43 billion
What states are leading the path? California and Oregon
What other states are considering it? Illinois, Kentucky, Massachusetts, Maryland, New York, Rhode Island, Vermont & Virginia
What do state regulations look like?
- require manufacturers to incorporate mandatory minimum security features
- Provide leeway for effective date so that manufacturers can comply
- California and Oregon laws will become effective Jan. 1, 2020
What standards do state regulations apply for security features?
- Is the security feature appropriate to the nature and function of the device?
- Is the security feature appropriate to the information it collects, contains, or transmits?
- Is the security feature designed to protect the device and any information contained therein from unauthorized access, destruction, use, modification or disclosure?
Are there exceptions or limitations to the laws applications? Yes.
- Oregon only applies to devices “used primarily for personal, family, or household purposes.”
- California applies to devices and devices that connect to devices via bluetooth
Government Technology | Contributor: Akin Gump Strauss Hauer & Feld LLP | State Lawmakers Go After IoT Security Risks