Companies that handle data from covered home security devices may share it with law enforcement only with written consent, a warrant, or in a tightly limited emergency.
Companies may share data from covered home security devices with law enforcement only with written consent, a warrant, or in a narrowly defined emergency involving imminent death or serious harm.
Operators must let people use covered home security devices without agreeing to share their data with law enforcement, and must clearly explain that choice.
The attorney general may seek court orders, damages or a civil penalty, and legal costs for violations; individuals cannot bring private lawsuits based on those violations.
Operators may share user data with law enforcement only with written consent, a judicial warrant, or under a narrowly defined emergency exception. This applies to companies that make or run covered devices for the public and collect, keep, or control access to user account data. A store is not covered solely because it sells or provides access to a device. The emergency must involve an imminent danger of death or serious bodily harm from kidnapping, abduction, or hostage-taking. There must not have been enough advance notice to get court approval; the officer must reasonably believe a court would approve the order; the data must be necessary and the only potential data available to prevent the harm; and it must be accessed before a warrant could issue. The section states that it takes effect July 1, 2026.
Operators must not make consent to data sharing a condition of using a device, and must clearly tell users that refusing consent will not end their access. This applies to operators of covered residential security or monitoring devices that record images or audio and allow digital storage, transmission, or remote access. Personal devices used incidentally for recording and devices without recording capability are excluded. The section states that it takes effect July 1, 2026.
A violation is treated as an unfair or deceptive business practice; the attorney general may sue for a court order, damages or a civil penalty, and legal fees and costs. These enforcement rules apply to violations of the section governing operators' sharing of smart household security device data with law enforcement. No person, including a consumer, may bring a private action to enforce this section or bring an action under another law based on a violation of it. These duties and remedies add to obligations under other laws and do not remove them. The section states that it takes effect July 1, 2026.
No hearings or votes scheduled.