HI HB739

Establishes the Security of Connected Devices Act requiring manufacturers of internet-connected devices sold in Hawaii to equip devices with reasonable security features appropriate to the device's nature, function, and information it collects or transmits.

Requires security features designed to protect devices and contained information from unauthorized access, destruction, use, modification, or disclosure.

Specifies that devices with authentication outside a local area network meet security requirements if they have either unique preprogrammed passwords for each device or require users to generate new authentication before first access.

Exempts manufacturers from responsibility for third-party software, electronic stores, or preventing users from modifying device software; excludes devices subject to federal security requirements and HIPAA-regulated activities from this chapter's scope.

Grants exclusive enforcement authority to the Hawaii Attorney General and does not create a private right of action; exempts law enforcement access to device information authorized by law or court order.