An act relating to adopting minimum security standards for connected devices

H.630 requires businesses selling connected devices (like smart home gadgets or wearables) in Vermont to meet specific security standards. Key provisions include mandating encrypted communications, automatic security updates enabled by default, strong password requirements with no default passwords, vulnerability management systems, and clear privacy policies with consumer data deletion options. The bill directly affects device manufacturers and sellers operating in Vermont, prohibiting sales of non-compliant products. Violations would be treated as unfair trade practices under Vermont law, with the requirements taking effect July 1, 2026.