Back to New York

A10132 • 2025

Enacts the "connected consumer product end of life disclosure act"

Enacts the "connected consumer product end of life disclosure act"

Passed Legislature

This bill passed both chambers and reached final enrollment, even if later executive action is not shown here.

Sponsor
Steven Otis
Last action
2026-06-02
Official status
In Senate Committee
Effective date
Not listed

Plain English Breakdown

Using official source text because the generated explanation was unavailable or could not be confirmed against the official bill text.

Enacts the "connected consumer product end of life disclosure act"

Enacts the "connected consumer product end of life disclosure act" Enacts the "connected consumer product end of life disclosure act", relating to requiring manufacturers of connected consumer products to disclose for how long they will provide technical support, security updates, or bug fixes for the software, hardware, or firmware necessary for the product to securely function.

What This Bill Does

  • Enacts the "connected consumer product end of life disclosure act" Enacts the "connected consumer product end of life disclosure act", relating to requiring manufacturers of connected consumer products to disclose for how long they will provide technical support, security updates, or bug fixes for the software, hardware, or firmware necessary for the product to securely function.

Limits and Unknowns

  • This entry is temporarily using official source text because the generated explanation could not be confirmed against the official bill text during the last sync.

Bill History

  1. 2026-06-02 Assembly

    PASSED ASSEMBLY

  2. 2026-06-02 Assembly

    DELIVERED TO SENATE

  3. 2026-06-02 Senate

    REFERRED TO RULES

  4. 2026-05-18 Assembly

    AMENDED ON THIRD READING 10132B

  5. 2026-02-26 Assembly

    ADVANCED TO THIRD READING CAL.280

  6. 2026-02-25 Assembly

    REPORTED

  7. 2026-02-12 Assembly

    AMEND AND RECOMMIT TO CODES

  8. 2026-02-12 Assembly

    PRINT NUMBER 10132A

  9. 2026-02-10 Assembly

    REPORTED REFERRED TO CODES

  10. 2026-02-03 Assembly

    REFERRED TO SCIENCE AND TECHNOLOGY

Official Summary Text

Enacts the "connected consumer product end of life disclosure act"
Enacts the "connected consumer product end of life disclosure act", relating to requiring manufacturers of connected consumer products to disclose for how long they will provide technical support, security updates, or bug fixes for the software, hardware, or firmware necessary for the product to securely function.

Current Bill Text

Read the full stored bill text
S T A T E   O F   N E W   Y O R K
        ________________________________________________________________________

                                          10132

                                  I N  A S S E M B L Y

                                    February 3, 2026
                                       ___________

        Introduced  by  M. of A. OTIS -- read once and referred to the Committee
          on Science and Technology

        AN ACT to amend the general business law, in relation  to  enacting  the
          "connected consumer product end of life disclosure act"

          THE  PEOPLE OF THE STATE OF NEW YORK, REPRESENTED IN SENATE AND ASSEM-
        BLY, DO ENACT AS FOLLOWS:

     1    Section 1. Short title. This act shall be known and may  be  cited  as
     2  the "connected consumer product end of life disclosure act".
     3    §  2. The general business law is amended by adding a new section 399-
     4  mm to read as follows:
     5    § 399-MM. CONNECTED CONSUMER PRODUCT END OF LIFE DISCLOSURE. 1.  DEFI-
     6  NITIONS. AS USED IN THIS SECTION, THE FOLLOWING  TERMS  SHALL  HAVE  THE
     7  FOLLOWING MEANINGS:
     8    (A)  "CONNECTED  CONSUMER  PRODUCT" MEANS ANY PRODUCT THAT IS INTENDED
     9  FOR CONSUMER USE AND DEPENDS FOR ITS FUNCTIONING, IN WHOLE OR  IN  PART,
    10  ON CONNECTION TO THE INTERNET. THE TERM INCLUDES THE PRODUCT, THE MOBILE
    11  APPLICATION, AND NECESSARY CLOUD INFRASTRUCTURE.
    12    (B)  "END  OF  LIFE"  MEANS THE POINT AT WHICH THE MANUFACTURER CEASES
    13  PROVIDING TECHNICAL SUPPORT, SECURITY UPDATES,  OR  BUG  FIXES  FOR  THE
    14  SOFTWARE,  HARDWARE,  OR  FIRMWARE  NECESSARY FOR THE CONNECTED CONSUMER
    15  PRODUCT TO SECURELY FUNCTION, EVEN IF THE PRODUCT IS STILL IN USE.
    16    (C) "FIRMWARE" MEANS LOW-LEVEL SOFTWARE THAT IS EMBEDDED INTO HARDWARE
    17  DEVICES, WHERE SUCH SOFTWARE PROVIDES THE ESSENTIAL INSTRUCTIONS  NEEDED
    18  FOR  HARDWARE  TO OPERATE PROPERLY, ACTING AS A MIDDLE LAYER BETWEEN THE
    19  HARDWARE AND HIGHER-LEVEL SOFTWARE SUCH AS DEVICE OPERATING  SYSTEMS  OR
    20  APPLICATIONS.
    21    (D)  "MINIMUM  GUARANTEED SUPPORT TIME FRAME" MEANS THE MINIMUM AMOUNT
    22  OF TIME FOR WHICH A COMPANY HAS PUBLICLY COMMITTED TO PROVIDING  TECHNI-
    23  CAL  SUPPORT, SECURITY UPDATES, OR BUG FIXES FOR THE SOFTWARE, HARDWARE,
    24  OR FIRMWARE, EXPRESSED AS CONTINUING UNTIL A SPECIFIC DATE.
    25    (E) "PRODUCT WEB PAGE" MEANS A WEB PAGE  SPECIFIC  TO  THE  PARTICULAR
    26  CONNECTED  CONSUMER PRODUCT THAT CONTAINS INFORMATION ABOUT SUCH PRODUCT
    27  AND ITS FEATURES.

         EXPLANATION--Matter in ITALICS (underscored) is new; matter in brackets
                              [ ] is old law to be omitted.
                                                                   LBD13518-03-6
        A. 10132                            2

     1    (F) "SECURITY UPDATES" MEANS UPDATES RELEASED TO ADDRESS  VULNERABILI-
     2  TIES IN THE SOFTWARE, HARDWARE, OR FIRMWARE USED BY A CONNECTED CONSUMER
     3  PRODUCT.
     4    (G)  "SUPPORT" MEANS SERVICE TO ENSURE THAT A CONNECTED CONSUMER PROD-
     5  UCT CONTINUES TO FULLY FUNCTION AND TO PROVIDE INFORMATION AND  GUIDANCE
     6  TO CONSUMERS REGARDING PROPER USE OF THE PRODUCT.
     7    (H)  "UPDATE"  MEANS  A  SECURITY  UPDATE, OR AN UPDATE RELEASED FOR A
     8  CONNECTED CONSUMER PRODUCT TO ADDRESS EFFECTIVELY A FLAW   IN THE  SOFT-
     9  WARE, HARDWARE, OR FIRMWARE RUNNING ON THE PRODUCT THAT  INTERFERES WITH
    10  THE FULL FUNCTIONING OF THE PRODUCT.
    11    (I)  "VULNERABILITY"  MEANS A FLAW IN THE SOFTWARE, HARDWARE, OR FIRM-
    12  WARE RUNNING ON A CONNECTED CONSUMER PRODUCT THAT LESSENS  THE  SECURITY
    13  AND  INTEGRITY  OF THE SOFTWARE, HARDWARE, OR FIRMWARE NEEDED TO OPERATE
    14  SUCH PRODUCT.
    15    2.  REQUIREMENTS.  THE  FOLLOWING  REQUIREMENTS  SHALL  APPLY  TO  ANY
    16  CONNECTED CONSUMER PRODUCT MANUFACTURED OR SOLD AFTER JANUARY FIRST, TWO
    17  THOUSAND TWENTY-SEVEN:
    18    (A)  THE MANUFACTURER SHALL CLEARLY AND CONSPICUOUSLY DISCLOSE A MINI-
    19  MUM GUARANTEED SUPPORT TIME FRAME ON THE PRODUCT WEBPAGE.
    20    (B) THE SELLER SHALL CLEARLY AND CONSPICUOUSLY DISCLOSE AT  THE  POINT
    21  OF  SALE  INSTRUCTIONS ON HOW TO FIND THE INFORMATION OUTLINED  IN PARA-
    22  GRAPH (A) OF THIS SUBDIVISION.
    23    (C) THE MINIMUM GUARANTEED SUPPORT TIME FRAME SHALL NOT BE  INCONSIST-
    24  ENT  WITH  REASONABLE  CONSUMER  EXPECTATIONS ABOUT HOW LONG A CONNECTED
    25  CONSUMER PRODUCT'S FEATURES THAT DEPEND UPON INTERNET CONNECTIVITY  WILL
    26  CONTINUE TO FUNCTION SAFELY AND EFFECTIVELY.
    27    (D) THE MINIMUM GUARANTEED SUPPORT TIME FRAME FOR A CONNECTED CONSUMER
    28  PRODUCT  SHALL  NOT  BE  REDUCED  AFTER IT IS DISCLOSED PURSUANT TO THIS
    29  SUBDIVISION. A MANUFACTURER MAY EXTEND THE  MINIMUM  GUARANTEED  SUPPORT
    30  TIME  FRAME  AT  ANY  TIME  BY  MAKING A NEW DISCLOSURE PURSUANT TO THIS
    31  SUBDIVISION.
    32    (E) THE DISCLOSURES DESCRIBED IN PARAGRAPH  (A)  OF  THIS  SUBDIVISION
    33  SHALL  ALSO INCLUDE A DETAILED ACCOUNT OF THE FEATURES AND FUNCTIONALITY
    34  THAT WILL BE LOST WHEN THE CONNECTED CONSUMER PRODUCT REACHES ITS END OF
    35  LIFE.
    36    (F) THE MANUFACTURER SHALL PROVIDE ADVANCE NOTICE OF THE  DECISION  TO
    37  CEASE  PROVIDING  TECHNICAL  SUPPORT, SECURITY UPDATES, OR BUG FIXES FOR
    38  THE SOFTWARE, HARDWARE, OR FIRMWARE ON THE PRODUCT WEBPAGE. SUCH  NOTICE
    39  SHALL:
    40    (I) BE POSTED SIX MONTHS BEFORE THE PRODUCT REACHES END OF LIFE; AND
    41    (II) DISCLOSE THE DATE ON WHICH THE PRODUCT REACHES END OF LIFE.
    42    (G)  THE  DISCLOSURE OUTLINED IN PARAGRAPH (A) OF THIS SUBDIVISION AND
    43  THE NOTIFICATION OUTLINED IN PARAGRAPH (F)  OF  THIS  SUBDIVISION  SHALL
    44  INCLUDE  CLEAR  INFORMATION ABOUT ACTIONS THE USER CAN TAKE IF THEY WANT
    45  TO CONTINUE USING THE CONNECTED CONSUMER PRODUCT IN A SECURE AND  EFFEC-
    46  TIVE  MANNER,  DISCONNECTING  SUCH  PRODUCT  FROM THE INTERNET AND SHALL
    47  PROVIDE A LIST OF FEATURES LOST, AND VULNERABILITIES AND SECURITY  RISKS
    48  THAT ARE LIKELY TO RESULT FROM THE END OF LIFE.
    49    (H)  A BUSINESS THAT OWNS OR CONTROLS A CONNECTED CONSUMER PRODUCT AND
    50  LEASES OR OTHERWISE PROVIDES SUCH CONNECTED CONSUMER  PRODUCT  TO  THEIR
    51  CUSTOMERS SHALL:
    52    (I) ENSURE THAT UPDATES ASSOCIATED WITH THE MINIMUM GUARANTEED SUPPORT
    53  TIME  FRAME ASSOCIATED WITH SUCH CONNECTED CONSUMER PRODUCT ARE PROMPTLY
    54  RECEIVED BY THE CUSTOMER; AND
    55    (II) WHEN THE PRODUCT HAS REACHED END OF LIFE:
    56    (A) PROMPTLY NOTIFY CUSTOMERS; AND
        A. 10132                            3

     1    (B) REPLACE THE PRODUCT, AT NO ADDITIONAL COST TO  CUSTOMERS,  WITH  A
     2  COMPARABLE  PRODUCT  CAPABLE OF RECEIVING NECESSARY UPDATES AND SUPPORT,
     3  WHEN SUCH COMPARABLE PRODUCT IS REASONABLY AVAILABLE  TO  THE  BUSINESS,
     4  AND NOTIFY CUSTOMERS OF SUCH REPLACEMENT PRODUCT.
     5    3.  ENFORCEMENT.  ANY  RETAILER  THAT  VIOLATES  THIS SECTION SHALL BE
     6  SUBJECT TO A CIVIL PENALTY OF NOT MORE THAN ONE HUNDRED DOLLARS FOR  THE
     7  FIRST VIOLATION, NOT  MORE   THAN   TWO HUNDRED FIFTY  DOLLARS  FOR  THE
     8  SECOND  VIOLATION,  AND  NOT  MORE  THAN  FIVE  HUNDRED DOLLARS FOR EACH
     9  VIOLATION  THEREAFTER.  THE PROVISIONS   OF   SUBDIVISION   ONE OF  THIS
    10  SECTION  MAY  BE  ENFORCED  CONCURRENTLY  BY THE DIRECTOR OF A MUNICIPAL
    11  CONSUMER AFFAIRS OFFICE, OR BY THE TOWN ATTORNEY, CITY CORPORATION COUN-
    12  SEL, OR OTHER LAWFUL DESIGNEE  OF  A MUNICIPALITY   OR   LOCAL   GOVERN-
    13  MENT,  AND  ALL  MONEYS  COLLECTED  THEREUNDER SHALL BE RETAINED BY SUCH
    14  MUNICIPALITY OR LOCAL GOVERNMENT.
    15    § 3. This act shall take effect immediately.