Vermont H0630 mandates minimum security standards for connected devices sold in the state.

Vermont H0630 requires businesses to sell only those consumer electronic products meeting minimum security standards if the products can connect to the internet. These standards include encrypted communications, automatic security updates, vulnerability management, and privacy practices. Businesses violating these standards commit unfair and deceptive acts in commerce. The act takes effect on July 1, 2026.

Vermont H0630 mandates minimum security standards for connected devices sold in the state.

Vermont H0630 requires businesses to sell only those consumer electronic products meeting minimum security standards if the products can connect to the internet. These standards include encrypted communications, automatic security updates, vulnerability management, and privacy practices. Businesses violating these standards commit unfair and deceptive acts in commerce. The act takes effect on July 1, 2026.