,,ii #aaeth ,,congress #ast ,session ,s4 #bbcd ,,in ,,the ,,senate ,,of ,,the ,,united ,,states ,december #ad1 #bjag ,mr4 ,wicker 7for himself and ,ms4 ,hassan7 introduced the following bill2 which was read twice and referred to the ,committee on ,commerce1 ,science1 and ,transportation ,a ,,bill ,to require the ,federal ,trade ,commission to develop cybersecurity resources for consumer education and awareness regarding the purchase and use of devices that are part of the ,internet of ,things1 and for other purposes4 #a4 ,short title ,this ,act may be cited as the ,internet of ,things ,consumer ,tips to ,improve ,personal ,security ,act of #bjagor the ,,iot ,consumer ,,tips ,act of #bjag4 #b4 ,findings ,congress finds the following3 7#a7 ,the term ,internet of ,things refers to devices1 applications1 and physical objects that are ,internet-enabled1 networked1 or connected4 7#b7 ,the devices that are part of the ,internet of ,things are equipped with sensors or developed with automated functionalities that allow them to collect1 send1 or receive data1 and perform according to consumer preferences that enhance productivity1 efficiency1 and convenience4 7#c7 ,the rapid adoption of the ,internet of ,things among consumers and businesses is driven by the wide range of economic and societal benefits that are generated by such devices across almost every industry and sector4 7#d7 ,consumer trust in the security of the ,internet of ,things is paramount to the leadership and competitiveness of the ,united ,states in the global digital economy4 7#e7 ,it is the policy of the ,united ,states to encourage innovation in the development and use of the ,internet of ,things and empower consumers to be responsible digital citizens and manage the security of their devices in collaboration with manufacturers1 sellers1 and service providers4 #c4 ,federal educational cybersecurity resources for consumers regarding devices that are part of the ,internet of ,things 7a7 ,definitions ,in this section-- 7#a7 ,covered device ,the term covered device-- 7,a7 includes devices1 applications1 and physical objects that are-- 7i7 part of the ,internet of ,things2 and 7ii7 marketed and sold primarily to consumers2 and 7,b7 does not include-- 7i7 devices that are marketed and sold for use primarily in industrial1 business1 or enterprise settings2 or 7ii7 smartphones1 tablets1 personal computers1 or devices leased to consumers by multichannel video programming distributors4 7#b7 ,cybersecurity threat ,the term cybersecurity threat has the meaning given to the term in section #ajb of the ,cybersecurity ,information ,sharing ,act of #bjae 7#f ,u4,s4,c4 #aeja74 7#c7 ,security vulnerability ,the term security vulnerability has the meaning given to the term in section #ajb of the ,cybersecurity ,information ,sharing ,act of #bjae 7#f ,u4,s4,c4 #aeja74 7b7 ,development of educational cybersecurity resources ,not later than #a year after the date of enactment of this ,act1 the ,federal ,trade ,commission shall1 in coordination with the ,national ,institute of ,standards and ,technology and relevant private sector stakeholders and experts1 develop voluntary educational cybersecurity resources for consumers relating to the practices of consumers with respect to the protection and use of covered devices1 including citing evidence of consumer attitudes and expectations4 7c7 ,elements ,the voluntary resources developed under subsection 7b7 shall be technology-neutral and include guidance1 best practices1 and advice for consumers to protect against1 mitigate1 and recover from cybersecurity threats or security vulnerabilities1 where technically feasible1 including-- 7#a7 the scope of possible security support from a vendor post-purchase2 7#b7 how to initiate or set up a covered device for use2 7#c7 the use of passwords1 available security tools and settings1 appropriate physical controls1 and avoidance of steps that can defeat security2 7#d7 updates to the software of a covered device during operation or use if applicable2 7#e7 the recovery of compromised devices2 7#f7 end-of-life considerations such as resetting1 deleting1 or modifying data collected or retained by a covered device when it is no longer in use or expected to be used by the consumer2 7#g7 security services1 tools1 or platforms for connected devices that may help consumers manage connected devices2 and 7#h7 varying security considerations depending on factors1 including the type of device and setting of use4 7d7 ,availability and publication ,the ,federal ,trade ,commission shall ensure that the resources developed under subsection 7b7 are available to and readily accessible by the public on the ,internet website of the ,federal ,trade ,commission4 7e7 ,periodic updates ,the ,federal ,trade ,commission shall review1 and1 as necessary update the resources developed under subsection 7b71 in collaboration with industry stakeholders1 to address changes in cybersecurity threats or security vulnerabilities and other technology developments or challenges4 7f7 ,voluntary use ,the resources developed under subsection 7b7 shall be for voluntary use by consumers4 7g7 ,treatment ,no guidelines1 best practices1 or advice issued by the ,federal ,trade ,commission with respect to the resources developed under subsection 7b7 shall confer any right on any person1 ,state1 or locality1 nor shall operate to bind the ,federal ,trade ,commission or any person to the approach recommended in such guidance1 best practice1 or advice4 ,the ,federal ,trade ,commission may not base an enforcement action on1 or execute a consent order based on1 any failure to promote or use such guidance1 or any practice used for covered device functionality that is alleged to be inconsistent with any guidance1 best practice1 or advice included in the resources developed under subsection 7b71 unless the practice allegedly violates another provision of law4 ,nothing in this ,act is intended to limit the ability of the ,federal ,trade ,commission to enforce section #e of the ,federal ,trade ,commission ,act 7#ae ,u4,s4,c4 #de74