An act relating to adopting minimum security standards for connected devices

This bill requires all connected devices sold in Vermont to meet specific minimum security standards, directly affecting manufacturers and retailers of internet-capable consumer electronics. The law mandates that these devices use encrypted communications, support automatic security updates, require strong passwords with default password resets, maintain vulnerability management systems, and provide clear privacy policies with data deletion options. Violations of these standards would be treated as unfair and deceptive acts under state commerce law, with the regulations taking effect on July 1, 2023.