Enacted in 2018 and going into effect on January 1, 2020, California passed SB 327, known as the Internet of Things Security Law or California’s IoT Security Law. It was the first law of its kind—focused on improving IoT security. The California IoT Security Law requires manufacturers to actively promote security in IoT devices. This includes:
Protecting the IoT device from any unauthorized attempts to access or modify the information contained within the device.
Providing “reasonable cybersecurity measures” that are appropriate to the nature of the IoT device and what type of information it collects.
Requiring authentication outside a local network using either a unique preprogrammed password or having users implement an alternate form of authentication before initial access.