CA SB 327

Also known as: SB 327, California IoT security law, California Connected Devices Law

California Security of Connected Devices Law (SB 327) — California State Legislature

Official site

The first US state law on the security of connected devices: a manufacturer selling an internet-connected device in California must equip it with security features appropriate to what the device does and what data it holds, and must either give each unit a unique preprogrammed password or force the user to set one before first access.

Subscribe to CA SB 327 (RSS)

Timeline

No changes recorded yet — we are watching, and nothing has been published.

Monitoring

Watched by 1 official source. Watching since 20 September 2026.