Bill H.630, introduced by Representative Rachelson of Burlington, aims to establish minimum security standards for connected devices sold in Vermont. The bill mandates that any consumer electronic product capable of internet connectivity must adhere to specific security requirements. These include the use of encrypted communications, support for automatic security updates, the implementation of strong password protocols, a system for managing vulnerabilities, and clear privacy practices. Businesses are required to provide accessible privacy policies, notify consumers of significant changes, disclose data collection practices, and allow consumers to delete their data.

Additionally, the bill stipulates that violations of these security standards will be considered unfair and deceptive acts in commerce, subject to enforcement under existing law. The proposed legislation is set to take effect on July 1, 2026, providing businesses time to comply with the new requirements.