Massachusetts lawmakers are pushing for legislation that would require companies to inform consumers when their connected products will stop receiving software updates, in an effort to combat cybersecurity risks and boost consumer protections. The proposed bills, collectively known as the "An Act Relative to Consumer Connected Devices," aim to create a state law that mandates manufacturers disclose on product packaging and online how long they will provide software and security updates for devices.
If passed, the laws would require manufacturers to notify customers when their device is approaching its end of service life and inform them about features that will be lost and potential security vulnerabilities that may arise when regular support ends. This information could help consumers make informed purchasing decisions and avoid being left vulnerable to malware once a manufacturer stops providing updates.
The initiative comes as concerns over the growing number of connected devices in homes and offices that no longer receive security updates have become more pronounced. Experts argue that these "zombie gadgets" can become attack vectors for hackers, leaving owners exposed to cyber threats.
Consumer Reports and other advocacy groups have long advocated for policies like this one, citing consumer stories about products suddenly stopping working or becoming completely unusable. By providing clear notice of when a product's support will end, consumers can better plan and budget for the eventual obsolescence of their devices.
The proposed legislation has received support from some lawmakers and industry experts, who see it as an opportunity to address growing cybersecurity concerns while promoting consumer protections. However, like many pieces of legislation, this one is still in its early stages and faces uncertainty about passage.
If passed, the laws would require manufacturers to notify customers when their device is approaching its end of service life and inform them about features that will be lost and potential security vulnerabilities that may arise when regular support ends. This information could help consumers make informed purchasing decisions and avoid being left vulnerable to malware once a manufacturer stops providing updates.
The initiative comes as concerns over the growing number of connected devices in homes and offices that no longer receive security updates have become more pronounced. Experts argue that these "zombie gadgets" can become attack vectors for hackers, leaving owners exposed to cyber threats.
Consumer Reports and other advocacy groups have long advocated for policies like this one, citing consumer stories about products suddenly stopping working or becoming completely unusable. By providing clear notice of when a product's support will end, consumers can better plan and budget for the eventual obsolescence of their devices.
The proposed legislation has received support from some lawmakers and industry experts, who see it as an opportunity to address growing cybersecurity concerns while promoting consumer protections. However, like many pieces of legislation, this one is still in its early stages and faces uncertainty about passage.