California has passed legislation that sets higher security standards for internet-connected devices.
 
The Information Privacy: Connected Devices bill demands that electronics manufacturers equip their products with "reasonable" security features begininng on January 1, 2020, meaning that each electronic product produced in the state will be given a unique password when it is made.

The bill also allows customers to sue for damages if they suffer harm when a company ignores the law.

The range of devices that the law covers includes any device that connects to the internet, directly or indirectly, and has an IP address or Bluetooth address, such as routers.