NY State Senate Bill 2025-S8507

Current Bill Status - In Senate Committee Internet And Technology Committee

Introduced
- In Committee Assembly
- In Committee Senate
- On Floor Calendar Assembly
- On Floor Calendar Senate
- Passed Assembly
- Passed Senate
Delivered to Governor
Signed By Governor

Please enter your contact information

First Name

Last Name

Email Address

A valid email address is required.

Home address is used to determine the senate district in which you reside. Your support or opposition to this bill is then shared immediately with the senator who represents you.

Optional services from the NY State Senate:

Create an account. An account allows you to officially support or oppose key legislation, sign petitions with a single click, and follow issues, committees, and bills that matter to you. When you create an account, you agree to this platform's terms of participation.

Include a custom message for your Senator? (Optional)

Enter a message to your senator. Many New Yorkers use this to share the reasoning behind their support or opposition to the bill. Others might share a personal anecdote about how the bill would affect them or people they care about.

Actions

View Actions

Date of Action	Assembly Actions - Lowercase Senate Actions - UPPERCASE
May 19, 2026	print number 8507b
May 19, 2026	amend and recommit to internet and technology
May 18, 2026	print number 8507a
May 18, 2026	amend and recommit to internet and technology
Jan 07, 2026	referred to internet and technology
Sep 12, 2025	referred to rules

Bill Amendments

Original

B (Active)

2025-S8507 - Details

Current Committee:: Senate Internet And Technology
Law Section:: General Business Law
Laws Affected:: Add §399-mm, Gen Bus L

2025-S8507 - Summary

Enacts the "connected consumer product end of life disclosure act", relating to requiring manufacturers of connected consumer products to disclose for how long they will provide technical support, security updates, or bug fixes for the software, hardware, or firmware necessary for the product to securely function.

2025-S8507 - Sponsor Memo

                                 
BILL NUMBER: S8507

SPONSOR: FAHY
 
TITLE OF BILL:

An act to amend the general business law, in relation to enacting the
"connected consumer product end of life disclosure act"

 
PURPOSE OR GENERAL IDEA OF BILL:

Enacts the "connected consumer product end of life disclosure act"

 
SUMMARY OF PROVISIONS:

Section 1: Establishes the short title.

Section 2: Adds a new § 399-mm to the General Business Law, defines
terms, set requirements for manufacturers of connected consumer
products, internet service providers, and provides for enforcement.

 
JUSTIFICATION:

Consumers increasingly rely on internet-connected devices, ranging from
smart appliances and fitness trackers to home security systems and
medical devices, that require ongoing software and security support.
When manufacturers discontinue support, these devices can become unsafe,
insecure, or unusable, often without consumer knowledge.

This bill empowers consumers by requiring transparency about how long
products will be supported and ensuring they are notified when devices
reach end of life. It prevents manufacturers from silently abandoning
products, leaving users exposed to cybersecurity risks, data breaches,
and loss of functionality.

Further, it places responsibility on internet service providers that
lease or provide such devices to maintain secure networks and protect
customers by removing unsupported devices.

By strengthening consumer protections in this rapidly growing market,
New York will set a national standard for transparency, cybersecurity,
and fair treatment of consumers.

 
PRIOR LEGISLATIVE HISTORY:

None.

 
FISCAL IMPLICATIONS FOR STATE AND LOCAL GOVERNMENTS:

To be determined.

 
EFFECTIVE DATE:
This act shall take

2025-S8507 - Bill Text download pdf

                             
                     S T A T E   O F   N E W   Y O R K
 ________________________________________________________________________
 
                                   8507
 
                        2025-2026 Regular Sessions
 
                             I N  S E N A T E
 
                            September 12, 2025
                                ___________
 
 Introduced  by  Sen.  FAHY  --  read twice and ordered printed, and when
   printed to be committed to the Committee on Rules
 
 AN ACT to amend the general business law, in relation  to  enacting  the
   "connected consumer product end of life disclosure act"
 
   THE  PEOPLE OF THE STATE OF NEW YORK, REPRESENTED IN SENATE AND ASSEM-
 BLY, DO ENACT AS FOLLOWS:
 
   Section 1. Short title. This act shall be known and may  be  cited  as
 the "connected consumer product end of life disclosure act".
   §  2. The general business law is amended by adding a new section 399-
 mm to read as follows:
   § 399-MM. CONNECTED CONSUMER PRODUCT END OF LIFE DISCLOSURE. 1.  DEFI-
 NITIONS. AS USED IN THIS SECTION, THE FOLLOWING  TERMS  SHALL  HAVE  THE
 FOLLOWING MEANINGS:
   (A)  "CONNECTED  CONSUMER PRODUCT" MEANS ANY DEVICE, OR OTHER PHYSICAL
 OBJECT, THAT IS INTENDED FOR CONSUMER USE AND IS CAPABLE  OF  CONNECTING
 TO THE INTERNET, EITHER DIRECTLY OR INDIRECTLY.  SUCH TERM SHALL INCLUDE
 THE  PHYSICAL DEVICE, THE MOBILE APPLICATION AND NECESSARY CLOUD INFRAS-
 TRUCTURE.
   (B) "END OF LIFE" MEANS THE POINT AT  WHICH  THE  MANUFACTURER  CEASES
 PROVIDING  TECHNICAL  SUPPORT,  SECURITY  UPDATES,  OR BUG FIXES FOR THE
 SOFTWARE, HARDWARE, OR FIRMWARE NECESSARY  FOR  THE  CONNECTED  CONSUMER
 PRODUCT TO SECURELY FUNCTION, EVEN IF THE PRODUCT IS STILL IN USE.
   (C) "FIRMWARE" MEANS LOW-LEVEL SOFTWARE THAT IS EMBEDDED INTO HARDWARE
 DEVICES,  WHERE SUCH SOFTWARE PROVIDES THE ESSENTIAL INSTRUCTIONS NEEDED
 FOR HARDWARE TO OPERATE PROPERLY, ACTING AS A MIDDLE LAYER  BETWEEN  THE
 HARDWARE  AND  HIGHER-LEVEL SOFTWARE SUCH AS DEVICE OPERATING SYSTEMS OR
 APPLICATIONS.
   (D) "INTERNET SERVICE PROVIDER" MEANS A COMPANY OR  ORGANIZATION  THAT
 PROVIDES  INDIVIDUALS  AND  BUSINESSES  WITH  ACCESS TO THE INTERNET VIA
 INFRASTRUCTURE AND NETWORKING TECHNOLOGIES THAT CONNECT  TO  THE  GLOBAL
 
  EXPLANATION--Matter in ITALICS (underscored) is new; matter in brackets
                       [ ] is old law to be omitted.
                                                            LBD13518-01-5
 S. 8507                             2

 
 INTERNET,  AND  THAT  OFFER  SERVICES SUCH AS BROADBAND, FIBER, DSL, AND
 MOBILE DATA, OFTEN INCLUDING EMAIL, AND WEB HOSTING.
   (E)  "MINIMUM  GUARANTEED SUPPORT TIME FRAME" MEANS THE MINIMUM AMOUNT
 OF TIME FOR WHICH A COMPANY HAS PUBLICLY COMMITTED TO PROVIDING  TECHNI-
 CAL  SUPPORT, SECURITY UPDATES, OR BUG FIXES FOR THE SOFTWARE, HARDWARE,
 OR FIRMWARE, EXPRESSED AS CONTINUING UNTIL A SPECIFIC DATE.
   (F) "PRODUCT WEB PAGE" MEANS A WEB PAGE  SPECIFIC  TO  THE  PARTICULAR
 CONNECTED  CONSUMER PRODUCT THAT CONTAINS FEATURES AND INFORMATION ABOUT
 SUCH PRODUCT.
   (G) "SECURITY UPDATES" MEANS UPDATES RELEASED TO ADDRESS  VULNERABILI-
 TIES IN THE SOFTWARE, HARDWARE, OR FIRMWARE USED BY A CONNECTED CONSUMER
 PRODUCT.
   (H)  "VULNERABILITY"  MEANS A FLAW IN THE SOFTWARE, HARDWARE, OR FIRM-
 WARE RUNNING ON A CONNECTED CONSUMER PRODUCT THAT LESSENS  THE  SECURITY
 AND  INTEGRITY  OF  THE SOFTWARE, HARDWARE OR FIRMWARE NEEDED TO OPERATE
 SUCH PRODUCT.
   2. REQUIREMENTS.  THE  FOLLOWING  REQUIREMENTS  SHALL  APPLY  FOR  ANY
 CONNECTED  CONSUMER  PRODUCT MANUFACTURED AFTER JANUARY FIRST, TWO THOU-
 SAND TWENTY-FOUR:
   (A) THE MANUFACTURER  SHALL  CLEARLY  DISCLOSE  A  MINIMUM  GUARANTEED
 SUPPORT  TIME  FRAME TO PROSPECTIVE BUYERS AT THE POINT OF SALE WHERE IT
 HAS THE ABILITY TO MAKE DISCLOSURES TO THE CONSUMER.
   (I) THE MINIMUM GUARANTEED SUPPORT TIME FRAME SHALL NOT BE  INCONSIST-
 ENT  WITH  REASONABLE  CONSUMER  EXPECTATIONS ABOUT HOW LONG A CONNECTED
 CONSUMER PRODUCT'S  FEATURES  THAT  DEPEND  UPON  INTERNET  CONNECTIVITY
 SHOULD LAST.
   (II) THE MINIMUM GUARANTEED SUPPORT TIME FRAME FOR A CONNECTED CONSUM-
 ER  PRODUCT  SHALL NOT BE REDUCED AFTER IT IS DISCLOSED PURSUANT TO THIS
 PARAGRAPH. A MANUFACTURER MAY EXTEND THE MINIMUM GUARANTEED SUPPORT TIME
 FRAME AT ANY TIME BY MAKING A NEW DISCLOSURE PURSUANT TO THIS PARAGRAPH.
   (B) THE MANUFACTURER SHALL PROVIDE CLEAR, PROMINENT LANGUAGE ABOUT THE
 MINIMUM GUARANTEED SUPPORT TIME FRAME FOR THE CONNECTED CONSUMER PRODUCT
 ON SUCH PRODUCT'S WEB PAGE.
   (C) THE MANUFACTURER SHALL PROVIDE A DETAILED ACCOUNT OF THE  FEATURES
 AND  FUNCTIONALITY  LOST WHEN THE CONNECTED CONSUMER PRODUCT REACHES ITS
 END OF LIFE ON SUCH PRODUCT'S WEB PAGE.
   (D) THE MANUFACTURER SHALL PROVIDE ADVANCE NOTIFICATION OF  THE  DECI-
 SION  TO  CEASE  PROVIDING  TECHNICAL  SUPPORT, SECURITY UPDATES, OR BUG
 FIXES FOR THE SOFTWARE, HARDWARE, OR  FIRMWARE  TO  THE  OWNERS  OF  THE
 CONNECTED CONSUMER PRODUCT:
   (I) SIX MONTHS BEFORE THE PRODUCT REACHES END OF LIFE; AND
   (II) ON THE DATE ON WHICH THE PRODUCT REACHES END OF LIFE.
   (E)  THE  MANUFACTURER MAY COMMUNICATE WITH CONNECTED CONSUMER PRODUCT
 OWNERS THROUGH ANY OR ALL OF THE FOLLOWING: AN INTERFACE ON  THE  DEVICE
 OR  AN  ASSOCIATED APPLICATION, IF PRACTICABLE, ON THE PRODUCT WEB PAGE,
 AND OTHERWISE THROUGH EMAIL WHEN  MANUFACTURERS  POSSESS  SUCH  CUSTOMER
 DATA.
   (F)  NOTIFICATIONS  ABOUT THE END OF LIFE SHALL INCLUDE CLEAR INFORMA-
 TION ABOUT ACTIONS THE USER CAN TAKE IF THEY WANT TO CONTINUE USING  THE
 CONNECTED  CONSUMER  PRODUCT IN A SECURE MANNER, INCLUDING DISCONNECTING
 SUCH PRODUCT FROM THE INTERNET, AND SHALL PROVIDE  A  LIST  OF  FEATURES
 LOST,  AND  VULNERABILITIES AND SECURITY RISKS THAT ARE LIKELY TO RESULT
 FROM THE END OF LIFE.
   (G)  INTERNET  SERVICE  PROVIDERS  THAT  LEASE  OR  OTHERWISE  PROVIDE
 CONNECTED CONSUMER PRODUCTS TO THEIR CUSTOMERS SHALL BE RESPONSIBLE FOR:
 S. 8507                             3
 
   (I)  ENSURING  THAT  SUCH PRODUCTS CONNECTED TO THEIR NETWORKS RECEIVE
 AND APPLY SECURITY PATCHES; AND
   (II)  REMOVING  SUCH  PRODUCTS THAT HAVE BEEN DECLARED END OF LIFE AND
 REPLACING THEM WITH COMPARABLE PRODUCTS CAPABLE  OF  RECEIVING  SOFTWARE
 UPDATES AND SECURITY PATCHES AT NO COST TO THE CUSTOMER.
   3.  ENFORCEMENT  BY  ATTORNEY  GENERAL.  A  VIOLATION  OF  ANY  OF THE
 PROVISIONS OF THIS SECTION SHALL BE DEEMED A DECEPTIVE ACT  OR  PRACTICE
 WITHIN  THE  MEANING OF SECTION THREE HUNDRED FORTY-NINE OF THIS CHAPTER
 AND ANY REMEDY PROVIDED THEREIN SHALL BE AVAILABLE FOR  THE  ENFORCEMENT
 OF THIS SECTION.
   4.  ENFORCEMENT  BY  INDIVIDUALS.  ANY  PERSON WHO SUFFERS DAMAGE AS A
 RESULT OF A VIOLATION OF ANY OF THE PROVISIONS OF THIS SECTION MAY BRING
 AN ACTION TO RECOVER:
   (A) ACTUAL DAMAGES, WHICH INCLUDE:
   (I) DIRECT COSTS OF CONNECTED CONSUMER PRODUCT REPAIR OR REPLACEMENT;
   (II) COSTS OF ALTERNATIVE CONNECTED CONSUMER PRODUCTS DURING REPAIR;
   (III) TRANSPORTATION AND SHIPPING COSTS;
   (IV) CONSEQUENTIAL DAMAGES FROM CONNECTED CONSUMER PRODUCT FAILURE;
   (V) LOST WAGES FROM TIME TAKEN FOR REPAIRS; AND
   (VI) OTHER DOCUMENTED MONETARY LOSSES;
   (B) REASONABLE ATTORNEY'S FEES AND COSTS; AND/OR
   (C) INJUNCTIVE RELIEF.
   § 3. This act shall take effect immediately.

2025-S8507A - Details

Current Committee:: Senate Internet And Technology
Law Section:: General Business Law
Laws Affected:: Add §399-mm, Gen Bus L

2025-S8507A - Summary

2025-S8507A - Sponsor Memo

                                 
BILL NUMBER: S8507A

SPONSOR: FAHY
 
TITLE OF BILL:

An act to amend the general business law, in relation to enacting the
"connected consumer product end of life disclosure act"

 
PURPOSE OR GENERAL IDEA OF BILL:

Enacts the "connected consumer product end of life disclosure act"

 
SUMMARY OF PROVISIONS:

SecLion 1: Establishes the short title.

Section 2: Adds a new § 399-mm to the General Business Law, defines
terms, set requirements for manufacturers of connected consumer
products, internet service providers, and provides for enforcement.

 
JUSTIFICATION:

Consumers increasingly rely on internet-connected devices, ranging from
smart appliances and fitness trackers to home security systems and
medical devices, that require ongoing software and security support.
When manufacturers discontinue support, these devices can become unsafe,
insecure, or unusable, often without consumer knowledge.

This bill empowers consumers by requiring transparency about how long
products will be supported and ensuring they are notified when devices
reach end of life. It prevents manufacturers from silently abandoning
products, leaving users exposed to cybersecurity risks, data breaches,
and loss of functionality.

Further, it places responsibility on internet service providers that
lease or provide such devices to maintain secure networks and protect
customers.by removing unsupported devices.

By strengthening consumer protections in this rapidly growing market,
New York will set a national standard for transparency, cybersecurity,
and fair treatment of consumers.

 
PRIOR LEGISLATIVE HISTORY:

None.

 
FISCAL IMPLICATIONS FOR STATE AND LOCAL GOVERNMENTS:

To be determined.

 
EFFECTIVE DATE:
This act shall take effect immediately

2025-S8507A - Bill Text download pdf

                             
                     S T A T E   O F   N E W   Y O R K
 ________________________________________________________________________
 
                                  8507--A
 
                        2025-2026 Regular Sessions
 
                             I N  S E N A T E
 
                            September 12, 2025
                                ___________
 
 Introduced  by  Sen.  FAHY  --  read twice and ordered printed, and when
   printed to be committed to the Committee on Rules  --  recommitted  to
   the  Committee  on  Internet  and Technology in accordance with Senate
   Rule  6,  sec.  8  --  committee  discharged,  bill  amended,  ordered
   reprinted as amended and recommitted to said committee

 AN  ACT  to  amend the general business law, in relation to enacting the
   "connected consumer product end of life disclosure act"
 
   THE PEOPLE OF THE STATE OF NEW YORK, REPRESENTED IN SENATE AND  ASSEM-
 BLY, DO ENACT AS FOLLOWS:
 
   Section  1.  Short  title. This act shall be known and may be cited as
 the "connected consumer product end of life disclosure act".
   § 2. The general business law is amended by adding a new section  399-
 mm to read as follows:
   § 399-MM. CONNECTED CONSUMER PRODUCT END OF LIFE DISCLOSURE. 1.  DEFI-
 NITIONS.  AS  USED  IN  THIS SECTION, THE FOLLOWING TERMS SHALL HAVE THE
 FOLLOWING MEANINGS:
   (A) "CONNECTED CONSUMER PRODUCT" MEANS ANY PHYSICAL PRODUCT, INCLUDING
 ANY MOBILE APPLICATION OR CLOUD INFRASTRUCTURE RELATED TO THE  FUNCTION-
 ING  OF  SUCH PRODUCT, THAT IS INTENDED FOR CONSUMER USE AND DEPENDS FOR
 ITS FUNCTIONING, IN WHOLE OR IN PART, ON CONNECTION TO THE INTERNET.
   (B) "END OF LIFE" MEANS THE POINT AT  WHICH  THE  MANUFACTURER  CEASES
 PROVIDING  A  NECESSARY UPDATE OR SUPPORT FOR A CONNECTED CONSUMER PROD-
 UCT, EVEN IF SUCH PRODUCT IS STILL IN USE.
   (C) "FIRMWARE" MEANS LOW-LEVEL SOFTWARE THAT IS EMBEDDED INTO HARDWARE
 DEVICES, WHERE SUCH SOFTWARE PROVIDES THE ESSENTIAL INSTRUCTIONS  NEEDED
 FOR  HARDWARE  TO OPERATE PROPERLY, ACTING AS A MIDDLE LAYER BETWEEN THE
 HARDWARE AND HIGHER-LEVEL SOFTWARE SUCH AS DEVICE OPERATING  SYSTEMS  OR
 APPLICATIONS.
   (D)  "MINIMUM  GUARANTEED SUPPORT TIME FRAME" MEANS THE MINIMUM AMOUNT
 OF TIME FOR WHICH A COMPANY HAS  PUBLICLY  COMMITTED  TO  PROVIDING  ALL
 
  EXPLANATION--Matter in ITALICS (underscored) is new; matter in brackets
                       [ ] is old law to be omitted.
                                                            LBD13518-07-6
 S. 8507--A                          2

 
 NECESSARY   UPDATES  AND  SUPPORT  FOR  A  CONNECTED  CONSUMER  PRODUCT,
 EXPRESSED AS A SPECIFIC DATE FOR THE END OF THE TIME FRAME.
   (E)  "PRODUCT  UPDATE"  MEANS AN UPDATE, OTHER THAN A SECURITY UPDATE,
 RELEASED FOR A CONNECTED CONSUMER PRODUCT TO ADDRESS EFFECTIVELY A  FLAW
 IN  THE  SOFTWARE,  HARDWARE,  OR  FIRMWARE RUNNING ON SUCH PRODUCT THAT
 INTERFERES WITH THE FULL FUNCTIONING OF SUCH PRODUCT.
   (F) "PRODUCT WEB PAGE" MEANS A WEB PAGE  SPECIFIC  TO  THE  PARTICULAR
 CONNECTED  CONSUMER PRODUCT THAT CONTAINS INFORMATION ABOUT SUCH PRODUCT
 AND ITS FEATURES.
   (G) "SECURITY UPDATE" MEANS AN UPDATE RELEASED FOR A CONNECTED CONSUM-
 ER PRODUCT TO ADDRESS EFFECTIVELY A VULNERABILITY IN THE SOFTWARE, HARD-
 WARE, OR FIRMWARE RUNNING ON SUCH PRODUCT.
   (H) "SUPPORT" MEANS SERVICE TO ENSURE THAT A CONNECTED CONSUMER  PROD-
 UCT  CONTINUES TO FULLY FUNCTION AND TO PROVIDE INFORMATION AND GUIDANCE
 TO CONSUMERS REGARDING PROPER USE OF SUCH PRODUCT.
   (I) "UPDATE" MEANS A PRODUCT UPDATE OR A SECURITY UPDATE.
   (J) "VULNERABILITY" MEANS A FLAW IN THE SOFTWARE, HARDWARE,  OR  FIRM-
 WARE  RUNNING  ON A CONNECTED CONSUMER PRODUCT THAT LESSENS THE SECURITY
 OR INTEGRITY OF SUCH PRODUCT.
   2.  REQUIREMENTS.  THE  FOLLOWING  REQUIREMENTS  SHALL  APPLY  TO  ANY
 CONNECTED CONSUMER PRODUCT MANUFACTURED OR SOLD AFTER JANUARY FIRST, TWO
 THOUSAND TWENTY-SEVEN:
   (A)  THE MANUFACTURER SHALL CLEARLY AND PROMINENTLY DISCLOSE A MINIMUM
 GUARANTEED SUPPORT TIME FRAME TO  PROSPECTIVE  BUYERS,  IN  ALL  OF  THE
 FOLLOWING WAYS:
   (I) DISCLOSING ON THE PRODUCT WEB PAGE;
   (II)  DISCLOSING AT THE POINT OF SALE, IN A MANNER REASONABLY DESIGNED
 TO REACH THE ATTENTION OF THE PROSPECTIVE BUYER, IF THE MANUFACTURER HAS
 THE ABILITY TO MAKE THE DISCLOSURE DIRECTLY TO PROSPECTIVE BUYERS AT THE
 POINT OF SALE; AND
   (III) IF THE MANUFACTURER DOES  NOT  HAVE  THE  ABILITY  TO  MAKE  THE
 DISCLOSURE DIRECTLY TO PROSPECTIVE BUYERS AT THE POINT OF SALE, DISCLOS-
 ING  TO THE RETAILER WITH INSTRUCTIONS TO DISCLOSE TO PROSPECTIVE BUYERS
 AT THE POINT OF SALE.
   (B) THE MINIMUM GUARANTEED SUPPORT TIME FRAME SHALL NOT BE  INCONSIST-
 ENT  WITH  REASONABLE  CONSUMER  EXPECTATIONS ABOUT HOW LONG A CONNECTED
 CONSUMER PRODUCT'S FEATURES THAT DEPEND UPON INTERNET CONNECTIVITY  WILL
 CONTINUE TO FUNCTION SAFELY AND EFFECTIVELY.
   (C) THE MINIMUM GUARANTEED SUPPORT TIME FRAME FOR A CONNECTED CONSUMER
 PRODUCT  SHALL  NOT  BE  REDUCED AFTER IT IS FIRST DISCLOSED PURSUANT TO
 PARAGRAPH (A) OF THIS SUBDIVISION. A MANUFACTURER MAY EXTEND THE MINIMUM
 GUARANTEED SUPPORT TIME FRAME AT ANY TIME IN THE MANNER DESCRIBED  UNDER
 PARAGRAPH (A) OF THIS SUBDIVISION.
   (D)  THE  DISCLOSURES  DESCRIBED  IN PARAGRAPH (A) OF THIS SUBDIVISION
 SHALL ALSO INCLUDE A DETAILED ACCOUNT OF THE FEATURES AND  FUNCTIONALITY
 THAT  WILL  BE  LOST  OR COMPROMISED WHEN THE CONNECTED CONSUMER PRODUCT
 REACHES ITS END OF LIFE.
   (E)  THE  MANUFACTURER  SHALL  PROVIDE  ADVANCE  NOTIFICATION  OF  THE
 CONNECTED  CONSUMER PRODUCT'S END OF LIFE, AS DESCRIBED IN PARAGRAPH (F)
 OF THIS SUBDIVISION, TO THE PUBLIC AND OWNERS OF SUCH PRODUCT:
   (I) SIX MONTHS BEFORE SUCH PRODUCT REACHES END OF LIFE; AND
   (II) ON THE DATE ON WHICH SUCH PRODUCT REACHES END OF LIFE.
   (F) A MANUFACTURER SHALL PROVIDE THE NOTIFICATION DESCRIBED  IN  PARA-
 GRAPH (E) OF THIS SUBDIVISION IN EACH OF THE FOLLOWING WAYS:
   (I) THROUGH AN INTERFACE ON THE CONNECTED CONSUMER PRODUCT OR AN ASSO-
 CIATED APPLICATION, IF PRACTICABLE;
 S. 8507--A                          3
 
   (II)  THROUGH  EMAIL  TO  OWNERS OF THE CONNECTED CONSUMER PRODUCT FOR
 WHOM THE MANUFACTURER POSSESSES AN EMAIL ADDRESS; AND
   (III) ON THE CONNECTED CONSUMER PRODUCT'S WEB PAGE.
   (G)  NOTIFICATION  ABOUT  THE CONNECTED CONSUMER PRODUCT'S END OF LIFE
 SHALL INCLUDE CLEAR INFORMATION ABOUT ACTIONS CONSUMERS CAN TAKE IF THEY
 WANT TO CONTINUE USING THE CONNECTED CONSUMER PRODUCT IN  A  SECURE  AND
 EFFECTIVE MANNER, DISCONNECTING SUCH PRODUCT FROM THE INTERNET AND SHALL
 PROVIDE  A  LIST  OF  FEATURES LOST IN, AND VULNERABILITIES AND SECURITY
 RISKS THAT ARE LIKELY TO RESULT FROM SUCH PRODUCT'S END OF LIFE.
   (H) THE MANUFACTURER SHALL NOT SELL, LEASE,  OR  OTHERWISE  DISTRIBUTE
 THE  CONNECTED  CONSUMER  PRODUCT AFTER THE DATE THAT IS ONE YEAR BEFORE
 THE MINIMUM GUARANTEED SUPPORT TIME FRAME END DATE FOR SUCH PRODUCT.
   (I) A BUSINESS THAT OWNS OR CONTROLS A CONNECTED CONSUMER PRODUCT THAT
 IT LEASES OR OTHERWISE PROVIDES TO ITS CUSTOMERS AS PART  OF  A  SERVICE
 SHALL:
   (I)  ENSURE THAT UPDATES PROVIDED BY THE MANUFACTURER FOR SUCH PRODUCT
 ARE PROMPTLY RECEIVED AND APPLIED; AND
   (II) WHEN THE PRODUCT HAS REACHED END OF LIFE:
   (A) PROMPTLY SO NOTIFY CUSTOMERS; AND
   (B) REPLACE SUCH PRODUCT, AT NO ADDITIONAL COST TO CUSTOMERS,  WITH  A
 COMPARABLE  PRODUCT  CAPABLE OF RECEIVING NECESSARY UPDATES AND SUPPORT,
 WHEN SUCH COMPARABLE PRODUCT IS REASONABLY AVAILABLE  TO  THE  BUSINESS,
 AND SO NOTIFY CUSTOMERS.
   3. EXEMPTION. NOTHING IN THIS SECTION SHALL APPLY TO A MEDICAL DEVICE,
 AS  DEFINED BY PARAGRAPH (G) OF SUBDIVISION ONE OF SECTION THREE HUNDRED
 NINETY-NINE-NN OF THIS ARTICLE.
   4. ENFORCEMENT. A VIOLATION OF ANY OF THE PROVISIONS OF  THIS  SECTION
 SHALL  BE AN UNLAWFUL PRACTICE UNDER SECTION THREE HUNDRED FORTY-NINE OF
 THIS CHAPTER. ALL REMEDIES, PENALTIES,  AND  AUTHORITY  GRANTED  TO  THE
 ATTORNEY  GENERAL THEREIN SHALL BE AVAILABLE FOR THE ENFORCEMENT OF THIS
 SECTION.
   § 3. This act shall take effect immediately.

2025-S8507B (ACTIVE) - Details

Current Committee:: Senate Internet And Technology
Law Section:: General Business Law
Laws Affected:: Add §399-mm, Gen Bus L

2025-S8507B (ACTIVE) - Summary

2025-S8507B (ACTIVE) - Sponsor Memo

                                 
BILL NUMBER: S8507B

SPONSOR: FAHY
 
TITLE OF BILL:

An act to amend the general business law, in relation to enacting the
"connected consumer product end of life disclosure act"

 
PURPOSE OR GENERAL IDEA OF BILL:

Enacts the "connected consumer product end of life disclosure act"

 
SUMMARY OF PROVISIONS:

Section 1: Establishes the short title.

Section 2: Adds a new § 399-mm to the General Business Law, defines
terms, set requirements for manufacturers of connected consumer
products, internet service providers, and provides for enforcement.

 
JUSTIFICATION:

Consumers increasingly rely on internet-connected devices, ranging from
smart appliances and fitness trackers to home security systems and
medical devices, that require ongoing software and security support.
When manufacturers discontinue support, these devices can become unsafe,
insecure, or unusable, often without consumer knowledge.

This bill empowers consumers by requiring transparency about how long
products will be supported and ensuring they are notified when devices
reach end of life. It prevents manufacturers from silently abandoning
products, leaving users exposed to cybersecurity risks, data breaches,
and loss of functionality.

Further, it places responsibility on internet service providers that
lease or provide such devices to maintain secure networks and protect
customers by removing unsupported devices.

By strengthening consumer protections in this rapidly growing market,
New York will set a national standard for transparency, cybersecurity,
and fair treatment of consumers.

 
PRIOR LEGISLATIVE HISTORY:

None.

 
FISCAL IMPLICATIONS FOR STATE AND LOCAL GOVERNMENTS:

To be determined.

 
EFFECTIVE DATE:
This act shall take effect immediately

2025-S8507B (ACTIVE) - Bill Text download pdf

                             
                     S T A T E   O F   N E W   Y O R K
 ________________________________________________________________________
 
                                  8507--B
 
                        2025-2026 Regular Sessions
 
                             I N  S E N A T E
 
                            September 12, 2025
                                ___________
 
 Introduced  by  Sen.  FAHY  --  read twice and ordered printed, and when
   printed to be committed to the Committee on Rules  --  recommitted  to
   the  Committee  on  Internet  and Technology in accordance with Senate
   Rule  6,  sec.  8  --  committee  discharged,  bill  amended,  ordered
   reprinted  as  amended  and recommitted to said committee -- committee
   discharged, bill amended, ordered reprinted as amended and recommitted
   to said committee
 
 AN ACT to amend the general business law, in relation  to  enacting  the
   "connected consumer product end of life disclosure act"
 
   THE  PEOPLE OF THE STATE OF NEW YORK, REPRESENTED IN SENATE AND ASSEM-
 BLY, DO ENACT AS FOLLOWS:
 
   Section 1. Short title. This act shall be known and may  be  cited  as
 the "connected consumer product end of life disclosure act".
   §  2. The general business law is amended by adding a new section 399-
 mm to read as follows:
   § 399-MM. CONNECTED CONSUMER PRODUCT END OF LIFE DISCLOSURE. 1.  DEFI-
 NITIONS. AS USED IN THIS SECTION, THE FOLLOWING  TERMS  SHALL  HAVE  THE
 FOLLOWING MEANINGS:
   (A) "CONNECTED CONSUMER PRODUCT" MEANS ANY PHYSICAL PRODUCT, INCLUDING
 ANY  MOBILE APPLICATION OR CLOUD INFRASTRUCTURE RELATED TO THE FUNCTION-
 ING OF SUCH PRODUCT, THAT IS INTENDED FOR CONSUMER USE AND  DEPENDS  FOR
 ITS FUNCTIONING, IN WHOLE OR IN PART, ON CONNECTION TO THE INTERNET.
   (B)  "END  OF  LIFE"  MEANS THE POINT AT WHICH THE MANUFACTURER CEASES
 PROVIDING A NECESSARY UPDATE OR SUPPORT FOR A CONNECTED  CONSUMER  PROD-
 UCT, EVEN IF SUCH PRODUCT IS STILL IN USE.
   (C) "FIRMWARE" MEANS LOW-LEVEL SOFTWARE THAT IS EMBEDDED INTO HARDWARE
 DEVICES,  WHERE SUCH SOFTWARE PROVIDES THE ESSENTIAL INSTRUCTIONS NEEDED
 FOR HARDWARE TO OPERATE PROPERLY, ACTING AS A MIDDLE LAYER  BETWEEN  THE
 HARDWARE  AND  HIGHER-LEVEL SOFTWARE SUCH AS DEVICE OPERATING SYSTEMS OR
 APPLICATIONS.
 
  EXPLANATION--Matter in ITALICS (underscored) is new; matter in brackets
                       [ ] is old law to be omitted.
                                                            LBD13518-09-6
 S. 8507--B                          2

 
   (D) "MINIMUM GUARANTEED SUPPORT TIME FRAME" MEANS THE  MINIMUM  AMOUNT
 OF  TIME  FOR  WHICH  A  COMPANY HAS PUBLICLY COMMITTED TO PROVIDING ALL
 NECESSARY  UPDATES  AND  SUPPORT  FOR  A  CONNECTED  CONSUMER   PRODUCT,
 EXPRESSED AS A SPECIFIC DATE FOR THE END OF THE TIME FRAME.
   (E)  "PRODUCT  UPDATE"  MEANS AN UPDATE, OTHER THAN A SECURITY UPDATE,
 RELEASED FOR A CONNECTED CONSUMER PRODUCT TO ADDRESS EFFECTIVELY A  FLAW
 IN  THE  SOFTWARE,  HARDWARE,  OR  FIRMWARE RUNNING ON SUCH PRODUCT THAT
 INTERFERES WITH THE FULL FUNCTIONING OF SUCH PRODUCT.
   (F) "PRODUCT WEB PAGE" MEANS A WEB PAGE  SPECIFIC  TO  THE  PARTICULAR
 CONNECTED  CONSUMER PRODUCT THAT CONTAINS INFORMATION ABOUT SUCH PRODUCT
 AND ITS FEATURES.
   (G) "SECURITY UPDATE" MEANS AN UPDATE RELEASED FOR A CONNECTED CONSUM-
 ER PRODUCT TO ADDRESS EFFECTIVELY A VULNERABILITY IN THE SOFTWARE, HARD-
 WARE, OR FIRMWARE RUNNING ON SUCH PRODUCT.
   (H) "SUPPORT" MEANS SERVICE TO ENSURE THAT A CONNECTED CONSUMER  PROD-
 UCT  CONTINUES TO FULLY FUNCTION AND TO PROVIDE INFORMATION AND GUIDANCE
 TO CONSUMERS REGARDING PROPER USE OF SUCH PRODUCT.
   (I) "UPDATE" MEANS A PRODUCT UPDATE OR A SECURITY UPDATE.
   (J) "VULNERABILITY" MEANS A FLAW IN THE SOFTWARE, HARDWARE,  OR  FIRM-
 WARE  RUNNING  ON A CONNECTED CONSUMER PRODUCT THAT LESSENS THE SECURITY
 OR INTEGRITY OF SUCH PRODUCT.
   2.  REQUIREMENTS.  THE  FOLLOWING  REQUIREMENTS  SHALL  APPLY  TO  ANY
 CONNECTED CONSUMER PRODUCT MANUFACTURED OR SOLD AFTER JANUARY FIRST, TWO
 THOUSAND TWENTY-SEVEN:
   (A)  THE MANUFACTURER SHALL CLEARLY AND PROMINENTLY DISCLOSE A MINIMUM
 GUARANTEED SUPPORT TIME FRAME TO  PROSPECTIVE  BUYERS,  IN  ALL  OF  THE
 FOLLOWING WAYS:
   (I) DISCLOSING ON THE PRODUCT WEB PAGE;
   (II)  DISCLOSING AT THE POINT OF SALE, IN A MANNER REASONABLY DESIGNED
 TO REACH THE ATTENTION OF THE PROSPECTIVE BUYER, IF THE MANUFACTURER HAS
 THE ABILITY TO MAKE THE DISCLOSURE DIRECTLY TO PROSPECTIVE BUYERS AT THE
 POINT OF SALE; AND
   (III) IF THE MANUFACTURER DOES  NOT  HAVE  THE  ABILITY  TO  MAKE  THE
 DISCLOSURE DIRECTLY TO PROSPECTIVE BUYERS AT THE POINT OF SALE, DISCLOS-
 ING  TO THE RETAILER WITH INSTRUCTIONS TO DISCLOSE TO PROSPECTIVE BUYERS
 AT THE POINT OF SALE.
   (B) THE MINIMUM GUARANTEED SUPPORT TIME FRAME SHALL NOT BE  INCONSIST-
 ENT  WITH  REASONABLE  CONSUMER  EXPECTATIONS ABOUT HOW LONG A CONNECTED
 CONSUMER PRODUCT'S FEATURES THAT DEPEND UPON INTERNET CONNECTIVITY  WILL
 CONTINUE TO FUNCTION SAFELY AND EFFECTIVELY.
   (C) THE MINIMUM GUARANTEED SUPPORT TIME FRAME FOR A CONNECTED CONSUMER
 PRODUCT  SHALL  NOT  BE  REDUCED AFTER IT IS FIRST DISCLOSED PURSUANT TO
 PARAGRAPH (A) OF THIS SUBDIVISION. A MANUFACTURER MAY EXTEND THE MINIMUM
 GUARANTEED SUPPORT TIME FRAME AT ANY TIME IN THE MANNER DESCRIBED  UNDER
 PARAGRAPH (A) OF THIS SUBDIVISION.
   (D)  THE  DISCLOSURES  DESCRIBED  IN PARAGRAPH (A) OF THIS SUBDIVISION
 SHALL ALSO INCLUDE A DETAILED ACCOUNT OF THE FEATURES AND  FUNCTIONALITY
 THAT  WILL  BE  LOST  OR COMPROMISED WHEN THE CONNECTED CONSUMER PRODUCT
 REACHES ITS END OF LIFE.
   (E)  THE  MANUFACTURER  SHALL  PROVIDE  ADVANCE  NOTIFICATION  OF  THE
 CONNECTED  CONSUMER PRODUCT'S END OF LIFE, AS DESCRIBED IN PARAGRAPH (F)
 OF THIS SUBDIVISION, TO THE PUBLIC AND OWNERS OF SUCH PRODUCT:
   (I) SIX MONTHS BEFORE SUCH PRODUCT REACHES END OF LIFE; AND
   (II) ON THE DATE ON WHICH SUCH PRODUCT REACHES END OF LIFE.
   (F) A MANUFACTURER SHALL PROVIDE THE NOTIFICATION DESCRIBED  IN  PARA-
 GRAPH (E) OF THIS SUBDIVISION IN EACH OF THE FOLLOWING WAYS:
 S. 8507--B                          3
 
   (I) THROUGH AN INTERFACE ON THE CONNECTED CONSUMER PRODUCT OR AN ASSO-
 CIATED APPLICATION, IF PRACTICABLE;
   (II)  THROUGH  EMAIL  TO  OWNERS OF THE CONNECTED CONSUMER PRODUCT FOR
 WHOM THE MANUFACTURER POSSESSES AN EMAIL ADDRESS; AND
   (III) ON THE CONNECTED CONSUMER PRODUCT'S WEB PAGE.
   (G) NOTIFICATION ABOUT THE CONNECTED CONSUMER PRODUCT'S  END  OF  LIFE
 SHALL INCLUDE CLEAR INFORMATION ABOUT ACTIONS CONSUMERS CAN TAKE IF THEY
 WANT  TO  CONTINUE  USING THE CONNECTED CONSUMER PRODUCT IN A SECURE AND
 EFFECTIVE MANNER, DISCONNECTING SUCH PRODUCT FROM THE INTERNET AND SHALL
 PROVIDE A LIST OF FEATURES LOST IN,  AND  VULNERABILITIES  AND  SECURITY
 RISKS THAT ARE LIKELY TO RESULT FROM SUCH PRODUCT'S END OF LIFE.
   (H)  THE  MANUFACTURER  SHALL NOT SELL, LEASE, OR OTHERWISE DISTRIBUTE
 THE CONNECTED CONSUMER PRODUCT AFTER THE DATE THAT IS  ONE  YEAR  BEFORE
 THE MINIMUM GUARANTEED SUPPORT TIME FRAME END DATE FOR SUCH PRODUCT.
   (I) A BUSINESS THAT OWNS OR CONTROLS A CONNECTED CONSUMER PRODUCT THAT
 IT  LEASES  OR  OTHERWISE PROVIDES TO ITS CUSTOMERS AS PART OF A SERVICE
 SHALL:
   (I) ENSURE THAT UPDATES PROVIDED BY THE MANUFACTURER FOR SUCH  PRODUCT
 ARE PROMPTLY RECEIVED AND APPLIED; AND
   (II) WHEN THE PRODUCT HAS REACHED END OF LIFE:
   (A) PROMPTLY SO NOTIFY CUSTOMERS; AND
   (B)  REPLACE  SUCH PRODUCT, AT NO ADDITIONAL COST TO CUSTOMERS, WITH A
 COMPARABLE PRODUCT CAPABLE OF RECEIVING NECESSARY UPDATES  AND  SUPPORT,
 WHEN  SUCH  COMPARABLE  PRODUCT IS REASONABLY AVAILABLE TO THE BUSINESS,
 AND SO NOTIFY CUSTOMERS.
   3. EXEMPTION. NOTHING IN THIS SECTION SHALL APPLY TO A MEDICAL DEVICE,
 AS DEFINED BY PARAGRAPH (G) OF SUBDIVISION ONE OF SECTION THREE  HUNDRED
 NINETY-NINE-NN OF THIS ARTICLE.
   4.  ENFORCEMENT. ANY VIOLATION OF THE PROVISIONS OF THIS SECTION SHALL
 CONSTITUTE AN UNLAWFUL PRACTICE UNDER SECTION THREE  HUNDRED  FORTY-NINE
 OF  THIS  CHAPTER. ALL REMEDIES, PENALTIES, AND AUTHORITY GRANTED TO THE
 ATTORNEY GENERAL THEREIN SHALL BE AVAILABLE FOR THE ENFORCEMENT OF  THIS
 SECTION.
   § 3. This act shall take effect immediately.

Comments

Open Legislation is a forum for New York State legislation. All comments are subject to review and community moderation is encouraged.

Comments deemed off-topic, commercial, campaign-related, self-promotional; or that contain profanity, hate or toxic speech; or that link to sites outside of the nysenate.gov domain are not permitted, and will not be published. Attempts to intimidate and silence contributors or deliberately deceive the public, including excessive or extraneous posting/posts, or coordinated activity, are prohibited and may result in the temporary or permanent banning of the user. Comment moderation is generally performed Monday through Friday. By contributing or voting you agree to the Terms of Participation and verify you are over 13.

Create an account. An account allows you to sign petitions with a single click, officially support or oppose key legislation, and follow issues, committees, and bills that matter to you. When you create an account, you agree to this platform's terms of participation.

Find your Senator and share your views on important issues.

Do you support this bill?

Senate Bill S8507

Sponsored By

Current Bill Status - In Senate Committee Internet And Technology Committee

Actions

Bill Amendments

2025-S8507 - Details

2025-S8507 - Summary

2025-S8507 - Sponsor Memo

2025-S8507 - Bill Text download pdf

2025-S8507A - Details

2025-S8507A - Summary

2025-S8507A - Sponsor Memo

2025-S8507A - Bill Text download pdf

2025-S8507B (ACTIVE) - Details

2025-S8507B (ACTIVE) - Summary

2025-S8507B (ACTIVE) - Sponsor Memo

2025-S8507B (ACTIVE) - Bill Text download pdf

Comments

Do you support this bill?

Get Status Alerts for 2025-S8507

Senate Bill S8507

Share this bill

Sponsored By

Patricia Fahy

Current Bill Status - In Senate Committee Internet And Technology Committee

Actions

Bill Amendments

2025-S8507 - Details

2025-S8507 - Summary

2025-S8507 - Sponsor Memo

2025-S8507 - Bill Text download pdf

2025-S8507A - Details

2025-S8507A - Summary

2025-S8507A - Sponsor Memo

2025-S8507A - Bill Text download pdf

2025-S8507B (ACTIVE) - Details

2025-S8507B (ACTIVE) - Summary

2025-S8507B (ACTIVE) - Sponsor Memo

2025-S8507B (ACTIVE) - Bill Text download pdf

Comments