United States of America: Law on Connected Devices: Device Protection Requests (SB 50) enters into force

On 1 January 2026, the Connected Devices: Device Protection Requests (SB 50) enters into force in California. The Act adds Chapter 35.5 (commencing with Section 22948.30) to Division 8 of the Business and Professions Code and amends Section 6320 of the Family Code to address misuse of internet-connected devices in domestic violence contexts. It authorises a survivor or a designated representative to submit a device protection request to an account manager, defined as any entity providing or managing user accounts for connected devices, to terminate or disable a perpetrator’s access. Account managers must act within two business days, ensure confidentiality, prohibit notification to perpetrators, and securely dispose of survivor information within ninety days. The law establishes civil enforcement mechanisms through injunctions or penalties up to USD 2’500 per violation and clarifies that connected devices fall under the Family Code’s provisions on disturbing the peace through coercive control, aligning California law with the federal Safe Connections Act of 2022.