If adopted, the proposal would require makers to disclose support periods for covered products and warn consumers before support ends, while providers maintain updates or replace products.
Makers would disclose how long they will provide support, security updates, and bug fixes for connected products made on or after January 1, 2026. They could not later shorten that period.
Makers would warn consumers at least six months before promised support ends, describing features that may stop working and other possible effects.
Providers would have to keep security updates coming for products still in active use. If a product is declared end-of-life, they would replace it at no cost with a comparable product that can receive updates.
Violations would count as unfair or deceptive business practices. The attorney general could enforce the rules, and people with financial losses could seek damages and other court relief.
Makers would tell buyers how long they will support covered products. This covers connected consumer products made on or after January 1, 2026, including the device, its related app, and needed cloud services. Where practical, makers would disclose the support period at the point of sale. They would also display it clearly on the packaging and the product’s webpage. Makers could extend the period by updating the disclosure, but could not shorten it after sale. The disclosed support period would run from the date of sale, unless the maker gives a specific end-of-life date.
Makers would warn consumers before promised support ends. This applies to consumers of products covered by the support-period disclosure rules. The notice would list features that will stop working and possible security risks, slower performance, reduced ability to work with other products, or other effects of ending support. Makers could send the notice through the product, by email if they have the consumer’s contact details, or on the product webpage. The notice would be due not less than six months before the minimum promised support period ends.
Internet providers that supply or lease connected products would maintain their security updates or replace the products. This applies to internet providers that supply or lease connected consumer products. If a provider declares a product end-of-life, it would have to replace it at no cost with a comparable product that can receive security updates. The update duty would apply while a product remains in active deployment; the replacement duty would apply if it is declared end-of-life.
The attorney general could enforce the rules, and people with losses could seek court relief. This covers violations by makers or service providers and people who suffer a resulting financial loss. A person could sue only if they suffered a measurable loss of money or property because a maker or service provider violated the rules. A court could award damages, including repair or replacement costs, and other relief.
No hearings or votes scheduled.