A new California law would make it illegal to manufacture or sell internet-connected devices that aren’t equipped with a unique password, or a feature that forces the consumer to set a personal password when the device is first used – it will take effect on Jan. 1, 2020
