On June 16, the Secure Resilient Future Foundation (SRFF) submitted a letter to the California State Assembly’s Privacy and Consumer Protection Committee urging lawmakers to support Senate Bill 898 (SB 898), legislation that would require manufacturers of Internet-connected consumer products to clearly disclose how long they will provide software support and security updates.
The letter, addressed to Chair Rebecca Bauer-Kahan and members of the Assembly Privacy and Consumer Protection Committees is in anticipation of a June 23rd, 2026 hearing by the Committee on SB 898, the Connected Consumer Products Bill, which has already passed the California Senate by a vote of 30 to 8.
California is one of three states, along with New York and Massachusetts, considering versions of the legislation, which seeks to provide consumers with information about manufacturers’ support of software that powers connected devices.
For too long, consumers have purchased “smart” devices with little or no information about how long those products will receive critical security patches and software updates. When support ends, millions of connected devices remain online with known vulnerabilities, creating opportunities for cybercriminals and nation-state actors while also contributing to unnecessary electronic waste.
SB 898 is an important step toward greater transparency and accountability. By requiring manufacturers to disclose software support periods before purchase and communicate when products reach end of support, the bill empowers consumers to make informed decisions while encouraging longer-lived, more secure technology.
In our letter to the Assembly, SRFF highlighted the growing cybersecurity risks posed by abandoned connected devices and argued that clear lifecycle disclosures will strengthen cybersecurity, protect consumers, and reduce the volume of otherwise functional products that are prematurely discarded.
SRFF was joined by other leading consumer rights and environmental groups in supporting the proposed legislation including the Center for Democracy and Technology, Consumer Reports, iFixit, the FULU Foundation and the Repair Association.
SRFF applauds the California Legislature for considering this forward-looking legislation and urges policymakers to support SB 898 as a model for improving the security, resilience, and sustainability of the connected products ecosystem.
You can visit the digitaldemocracy website to learn more about the legislation, view Tuesday’s hearing and prior hearings and follow its path through the California legislature.