California 2017-2018 Regular Session

California Assembly Bill AB1906

Introduced
1/22/18  
Introduced
1/22/18  
Refer
2/5/18  
Refer
2/5/18  
Report Pass
4/23/18  
Report Pass
4/23/18  
Refer
4/24/18  
Refer
4/24/18  
Report Pass
5/8/18  
Engrossed
5/29/18  
Engrossed
5/29/18  
Refer
5/30/18  
Refer
5/30/18  
Refer
6/7/18  
Report Pass
6/11/18  
Report Pass
6/11/18  
Refer
6/11/18  
Refer
6/11/18  
Report Pass
6/19/18  
Report Pass
6/19/18  
Refer
6/19/18  
Report Pass
7/2/18  
Report Pass
7/2/18  
Refer
7/3/18  
Refer
8/6/18  
Refer
8/6/18  
Report Pass
8/17/18  
Report Pass
8/17/18  
Enrolled
8/30/18  
Enrolled
8/30/18  
Chaptered
9/28/18  
Chaptered
9/28/18  
Passed
9/28/18  

Caption

Information privacy: connected devices.

Impact

By enforcing specific security protocols, AB 1906 seeks to protect both manufacturers and consumers. This bill provides legal backing for consumers whose data privacy may be compromised due to inadequate security measures on connected devices. It emphasizes that manufacturers must ensure the devices have features effective against unauthorized access and disclosure, thereby potentially reshaping industry standards for data security.

Summary

Assembly Bill No. 1906, concerning information privacy for connected devices, aims to enhance security measures for devices capable of connecting to the Internet. Effective January 1, 2020, this legislation mandates that manufacturers of connected devices implement reasonable security features appropriate to the device's function and the sensitive information it may handle. This requirement addresses growing concerns over unauthorized access and data breaches that have become increasingly prevalent with the rise of Internet-connected devices.

Sentiment

The general sentiment surrounding AB 1906 appears to be supportive among privacy advocates who argue that enhanced privacy protections for consumers are critical in today’s data-driven economy. However, some manufacturers may view the regulations as an additional burden, fearing that compliance costs could impede innovation and competitiveness in the connected devices market. This dichotomy reflects a broader tension between consumer protection and business operational flexibility.

Contention

Notable contentions include the bill's lack of a provision allowing for private right of action, which some stakeholders believe limits consumers' ability to seek redress directly. Enforcement of compliance with the provisions characterizes the Attorney General and other qualified legal authorities as the sole enforcers, potentially complicating the accountability structure for violations. Further, the bill delineates that it does not extend responsibilities to unaffiliated third-party software, which could raise additional concerns regarding the ecosystems surrounding connected devices.

Companion Bills

No companion bills found.

Previously Filed As

CA SB1000

Connected devices: device protection requests.

CA AB801

Student privacy: online personal information.

CA SB1394

Access to connected vehicle service.

CA SB1223

Consumer privacy: sensitive personal information: neural data.

CA AB1008

California Consumer Privacy Act of 2018: personal information.

CA AB947

California Consumer Privacy Act of 2018: sensitive personal information.

CA AB1949

California Consumer Privacy Act of 2020: collection of personal information of a consumer less than 18 years of age.

CA AB1194

California Privacy Rights Act of 2020: exemptions: abortion services.

CA AB1712

Personal information: data breaches.

CA AB1463

Automated license plate recognition systems: retention and use of information.

Similar Bills

CA SB327

Information privacy: connected devices.

CA AB2392

Information privacy: connected devices: labeling.

HI SB1002

Relating To Information Privacy.

HI HB739

Relating To Information Privacy.

CA SB299

Personal information: minors: internet website: connected devices.

RI S2031

General Regulatory Provisions - Internet Privacy And Security

HI SB2427

Relating To Information Privacy.

CA AB2167

Information privacy: digital health feedback systems.