Hawaii Senate Bill SB2427

Hawaii 2022 Regular Session

• Introduced: 1/21/22
• Refer: 1/24/22
• Refer: 1/31/22

Caption

Relating To Information Privacy.

Impact

The passage of SB2427 is expected to enhance information privacy and consumer safety across the state by imposing standards that manufacturers must follow when creating and selling IoT devices. By requiring reasonable security features, the bill seeks to address prevalent vulnerabilities in these devices, reflecting a growing recognition of the importance of cybersecurity in the digital age. It also aims to help prevent data breaches, which could lead to identity theft and other cybercrimes.

Summary

Senate Bill 2427, titled the Security of IoT Devices Act, mandates that manufacturers of Internet of Things (IoT) devices sold in Hawaii must incorporate reasonable security features into these devices. This law aims to safeguard the devices and the information they handle from unauthorized access and various threats posed by cyberattacks. The legislation outlines specific security measures that manufacturers must adopt, including compliance with consensus standards and certification requirements from recognized bodies.

Contention

However, some concerns were raised regarding the limitations set by the bill on manufacturers. Specific clauses within the bill clarify that there will be no liability imposed on manufacturers related to unaffiliated third-party applications or for failing to prevent users from modifying software linked to the devices. This has led to debates on the adequacy of the measures proposed, with critics arguing that the absence of private rights of action limits recourse for consumers facing issues arising from insecure devices.