Civ. Code, § 1798.91.06 · Title 1.81.26. Security of Connected Devices
Civ. Code, § 1798.91.06
Text — As published in the Legislative Counsel's database, tables dated October 18, 2026 (pubinfo_2025.zip)
(a) This title shall not be construed to impose any duty upon the manufacturer of a connected device related to unaffiliated third-party software or applications that a user chooses to add to a connected device.
(b) This title shall not be construed to impose any duty upon a provider of an electronic store, gateway, marketplace, or other means of purchasing or downloading software or applications, to review or enforce compliance with this title.
(c) This title shall not be construed to impose any duty upon the manufacturer of a connected device to prevent a user from having full control over a connected device, including the ability to modify the software or firmware running on the device at the user’s discretion.
(d) This title shall not apply to any connected device the functionality of which is subject to security requirements under federal law, regulations, or guidance promulgated by a federal agency pursuant to its regulatory enforcement authority.
(e) This title shall not be construed to provide a basis for a private right of action. The Attorney General, a city attorney, a county counsel, or a district attorney shall have the exclusive authority to enforce this title.
(f) The duties and obligations imposed by this title are cumulative with any other duties or obligations imposed under other law, and shall not be construed to relieve any party from any duties or obligations imposed under other law.
(g) This title shall not be construed to limit the authority of a law enforcement agency to obtain connected device information from a manufacturer as authorized by law or pursuant to an order of a court of competent jurisdiction.
(h) A covered entity, provider of health care, business associate, health care service plan, contractor, employer, or any other person subject to the federal Health Insurance Portability and Accountability Act of 1996 (HIPAA) (Public Law 104-191) or the Confidentiality of Medical Information Act (Part 2.6 (commencing with Section 56) of Division 1) shall not be subject to this title with respect to any activity regulated by those acts.
(i) This title shall become operative on January 1, 2020.
Notes and commentary — not statutory text
History
Added by Stats. 2018, Ch. 860, Sec. 1. (AB 1906) Effective January 1, 2019. Operative January 1, 2020, by its own provisions. See similar section in the Title 1.81.26 added by Stats. 2018, Ch. 886.
Source of truth
- Edition
- As published in the Legislative Counsel's database, tables dated October 18, 2026 (pubinfo_2025.zip)
- Official file
- https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=CIV§ionNum=1798.91.06.
- Text hash
- sha256 fdc713a10454a27e7af86b87f6daf96a9325d21fbc39d06823b1a035570a6e59
- Composed by
- compose_ca.py 2026-10-22: the Legislative Counsel's CAML content files read by a tokenizer (caml_readers.reader_a); an independent xml.etree reading (caml_readers.reader_b) agrees on every section
This section cites
Provisions in this library that the text above cites, as it prints each citation. A range cited as “ss. 61.13-61.16” links its first and last provisions.
Procedural information only. Not legal advice and not a substitute for the advice of an attorney. Confirm the current text with the official publisher before relying on it.