California enacts first-in-nation IoT security law

Oct. 3, 2018

The new law requires some form of authentication for most connected devices. The nation’s first IoT security act was just signed into law in California. The law isn’t just about the IoT, but billions of small connected devices will have to add critical features if they’re sold in the state after Jan. 1, 2020.

SB-327 is broad legislation that applies, with some exceptions, to “…any device, or other physical object that is capable of connecting to the Internet, directly or indirectly, and that is assigned an Internet Protocol address or Bluetooth address.” Those devices will be required to have basic security capabilities installed—though precisely what those might be is not spelled out in the legislation.

Instead, the law requires steps that are “appropriate” to the device and the information it collects, protecting each from “…unauthorized access, destruction, use, modification, or disclosure.” Specifically, if a device has provisions for unique authentication of device and/or users, it is considered to be in compliance with the law.

The exceptions to the requirement are those devices that fall under federal laws or regulations, including medical devices.

Dark Reading has the story

Sponsored Recommendations

Care Access Made Easy: A Guide to Digital Self Service

Embracing digital transformation in healthcare is crucial, and there is no one-size-fits-all strategy. Consider adopting a crawl, walk, run approach to digital projects, enabling...

Powering a Digital Front Door with a Comprehensive Provider Directory

Learn how Geisinger improved provider data accuracy, SEO, and patient acquisition with a comprehensive provider directory.

Data-driven, physician-focused approach to CDI improvement

Organizational profile Sisters of Charity of Leavenworth (SCL) Health* has been providing care since it originated in the 1600s in France as the Daughters of Charity. These religious...

Luminis Health improved quality and financial outcomes with advanced CDI technology and consulting from 3M

In the beginning, there were challengesBefore partnering with 3M Health Information Systems (HIS), Luminis Health’s clinical documentation integrity (CDI) program faced ...