Relates to the security of connected devices

This bill requires manufacturers selling connected devices (like smart home gadgets or wearables) in New York to include reasonable security features. It mandates that security measures must be appropriate for the device's function and the data it handles, specifically to prevent unauthorized access, hacking, or data breaches. Key provisions include requiring unique default passwords or forcing users to set new login credentials during first use. The law explicitly excludes federal-regulated devices, HIPAA-covered health devices, third-party apps, and user modifications to device software. It does not create private lawsuits but grants enforcement authority solely to the Attorney General.