"Massachusetts Aims to Protect Consumers from Obsolete Smart Devices"
In a bid to safeguard consumers, two Massachusetts lawmakers have introduced bills that would require companies to disclose how long they will provide software and security updates for their connected products. The proposed legislation aims to reduce the threat of cybersecurity risks associated with smart devices that no longer receive regular support.
Under the bills, manufacturers would need to clearly inform customers on product packaging and online when a device is approaching its service life's end, and about features that may be lost and potential security vulnerabilities that will arise when regular support ends. This measure is seen as crucial in protecting consumers from becoming victims of malware attacks.
According to advocacy groups such as Consumer Reports and the Secure Resilient Future Foundation, this is an issue that has been growing more pronounced with the increasing use of smart devices in daily life. As a result, these organizations have encouraged lawmakers to support policy measures that would inform customers when their connected products are about to stop working.
In Massachusetts, two bills collectively known as An Act Relative to Consumer Connected Devices were introduced by state senator William Brownsberger and state representative David Rogers. While the bills are still in the early stages of development, supporters hope they will inspire more legislation at the state and federal levels in the near future.
Stacey Higginbotham, a policy fellow at Consumer Reports, emphasized that consumers need awareness about their devices' risks as manufacturers increasingly rely on software updates to keep them secure. "Your product is now connected to a manufacturer by this software tether that dictates how it's going to perform," she noted.
Paul Roberts, president of the Secure Resilient Future Foundation, added that reducing the attack surface against such vulnerable devices is crucial, adding "We cannot prevent it, but we do want to give consumers the awareness that they could be hosting something. Basically, they have an open door that can no longer be locked."
While similar legislation at other levels, including the US House and New York, is pending, advocates believe Massachusetts' initiative serves as a catalyst for broader change.
In a bid to safeguard consumers, two Massachusetts lawmakers have introduced bills that would require companies to disclose how long they will provide software and security updates for their connected products. The proposed legislation aims to reduce the threat of cybersecurity risks associated with smart devices that no longer receive regular support.
Under the bills, manufacturers would need to clearly inform customers on product packaging and online when a device is approaching its service life's end, and about features that may be lost and potential security vulnerabilities that will arise when regular support ends. This measure is seen as crucial in protecting consumers from becoming victims of malware attacks.
According to advocacy groups such as Consumer Reports and the Secure Resilient Future Foundation, this is an issue that has been growing more pronounced with the increasing use of smart devices in daily life. As a result, these organizations have encouraged lawmakers to support policy measures that would inform customers when their connected products are about to stop working.
In Massachusetts, two bills collectively known as An Act Relative to Consumer Connected Devices were introduced by state senator William Brownsberger and state representative David Rogers. While the bills are still in the early stages of development, supporters hope they will inspire more legislation at the state and federal levels in the near future.
Stacey Higginbotham, a policy fellow at Consumer Reports, emphasized that consumers need awareness about their devices' risks as manufacturers increasingly rely on software updates to keep them secure. "Your product is now connected to a manufacturer by this software tether that dictates how it's going to perform," she noted.
Paul Roberts, president of the Secure Resilient Future Foundation, added that reducing the attack surface against such vulnerable devices is crucial, adding "We cannot prevent it, but we do want to give consumers the awareness that they could be hosting something. Basically, they have an open door that can no longer be locked."
While similar legislation at other levels, including the US House and New York, is pending, advocates believe Massachusetts' initiative serves as a catalyst for broader change.