联网设备的信息安全
INFORMATION PRIVACY:
CONNECTED DEVICES
隐私保护/信息安全
⏹背景
随着网络技术的发展，越来越多的设备实现互联，网上服务和消费也变的更普遍，给我们带来便利的
同时，也暴露出越来越多的信息隐私泄露的问题，引起世人的关注，各国纷纷立法加强对个人隐私和
信息的保护。
⏹加州消费者隐私法案California Consumer Privacy Act (2018)
▪The California Consumer Privacy Act (CCPA) is a bill intended to enhance privacy rights and consumer protection for residents of California. The bill was signed into law on June 28,
银行透支2018. The CCPA becomes effective on January 1, 2020
⏹欧盟通用数据保护条例GDPR
▪The General Data Protection Regulation (EU) 2016/679 is a regulation in EU law on data protection and privacy for all individual citizens of the European Union (EU) and the
European Economic Area (EEA). The GDPR aims primarily to give control to individuals
over their personal data.
过目不忘的人
2
隐私保护/信息安全
⏹加州消费者隐私法案California Consumer Privacy Act (CCPA)中国航天作文
⏹(1)The right of Californians to know what personal information is being collected about them.
⏹(2)The right of Californians to know whether their personal information is sold or disclod and
to whom.
⏹(3)The right of Californians to say no to the sale of personal information.
⏹(4)The right of Californians to access their personal information.
⏹(5)The right of Californians to equal rvice and price, even if they exerci their privacy rights
书画市场有权利了解公司收集哪些个人信息；对个人信息是否售卖或者泄露以及卖给谁有知情权；
拒绝个人信息被售卖的权利；对个人信息访问的权利；享有隐私权的同时，享受同等服务。
3
隐私保护/信息安全
Existing law requires a business to take all reasonable steps to dispo of customer
records within its custody or control containing personal information when the records are
no longer to be retained by the business by shredding, erasing, or otherwi modifying the
personal information in tho records to make it unreadable or undecipherable. Existing
law also requires a business that owns, licens, or maintains personal information about a
刮画作品
California resident to implement and maintain reasonable curity procedures and
practices appropriate to the nature of the information, to protect the personal information
from unauthorized access, destruction, u, modification, or disclosure. Existing law
authorizes a customer injured by a violation of the provisions to institute a civil action to
recover damages.
当企业不再保留含有个人信息的客户记录时，现有法律要求它们采取一切合理步骤在其监管或控制下处理这些记录，如切碎、删除或修改这些个人信息使其难以阅读或理解。现有法律还要求拥有、许可或
别了哥哥维护加利福尼亚居民的个人信息的企业，采取和保留适合信息本质的合理的安全措施和惯例，来保护个
人信息免遭未经授权的访问，破坏，使用和修改或披露。现行法律授权因企业违反规定而受到伤害的客户提起民事诉讼以索取损害赔偿。
2
4
联网设备的信息安全
⏹CA SB 327 & CA AB 1906/Oregon Hou Bill 2395
埃及是哪个国家▪2020年1月1日期，美国加利福尼亚州实施名为互联设备的信息隐私（information privacy: connected devices)的法案，同时俄勒冈州也发布了相同的法案，对联网的设备安全特性做出要求。
▪美国的买家，零售商也积极应对，纷纷更新protocol，增加对该法规的要求。
Security of Connected Devices California Civil Code, Division
3, Part 4, Title 1.81.26, Section
1798.91.04 -2018(a) A manufacturer of a connected device shall equip the device with a reasonable
curity feature or features that are all of the following:
(1) Appropriate to the nature and function of the device.
(2) Appropriate to the information it may collect, contain, or transmit.
(3) Designed to protect the device and any information contained therein from
unauthorized access, destruction, u, modification, or disclosure.
(b) Subject to all of the requirements of above subdivision (a), if a connected device is equipped with a means for authentication outside a local area network, it shall be deemed
a reasonable curity feature under subdivision (a) if either of the following requirements
are met:
(1) The preprogrammed password is unique to each device manufactured.
(2) The device contains a curity feature that requires a ur to generate a new means
of authentication before access is granted to the device for the first time.
Note:
助理调研员1)In lieu of testing, a test report for Costco accredited third-party laboratory (SGS,
BV, MTS) can be submitted for document review.
2)And also providing the lab with a Declaration Letter which can be found in appendix
below.
5
