Skip to content

Market

Selling in California?

We track 1,077 rules from 20 laws and lists for consumer goods here, and 4 changes starting in the next 24 months. Type your product to see which apply.

  • Free
  • No account needed
  • The law behind every rule
On this page6

Changes

Upcoming changes

4 changes to 20 rules start in California in the next 24 months.

Industries

Coverage

What we check here for each industry, and from when. Open an industry to see what we cover and what we don't. A law we hold but haven't checked shows as Not checked, with its quote. Anything we don't cover shows as Not covered. Neither is ever clear.

ClaraDB gives a verdict only for PFAS state laws for cookware and bakeware, California Proposition 65 consumer-product warning check for BPA, BPS, formaldehyde, styrene, antimony trioxide, vinyl acetate, lead and cadmium, California Proposition 65 warning check for candles and ceramicware (lead, cadmium, formaldehyde, acetaldehyde, benzene, naphthalene, carbon monoxide, benzo[a]pyrene), US packaging EPR producer size thresholds (California, Colorado, Maryland, Minnesota, Oregon, Washington) for a brand-owning manufacturer, US lead in children's products and furniture (lead paint and total lead content), US lead in toys and child care articles (lead paint and total lead content), US lead in children's products (other) and bags (lead paint and total lead content), US phthalates in children's toys and child care articles (DEHP, DBP, BBP, DINP, DIBP, DPENP, DHEXP, DCHP) and US children's product certificate and tracking label for children's tableware (AI-checked, quotes verified word for word). Every other answer shows the laws and quotes found without saying whether they apply. Not checked: Consumer electronics (FCC equipment authorization, 47 CFR Parts 2 and 15, energy rules). What ClaraDB has checked

Home and kitchen goodsMain sourcesfrom 1 Jan 20254 areas read · 3 not read yet
Sources read
  • Prop 65 listed chemicals and safe-harbor warnings
  • cookware chemical disclosure (HSC 109000-109014)
  • PFAS in textile articles (HSC 108970-108971)
  • upholstered furniture flame-retardant label (BPC 19094)
Not read yet
  • DTSC designated-list triggers for cookware disclosure (list not stored)
  • Safer Consumer Products priority products
  • California Toxic-Free Cosmetics/Food Packaging rules outside the listed instruments
Cosmetics and personal careMain sourcesfrom 1 Jan 20253 areas read · 2 not read yet
Sources read
  • Toxic-Free Cosmetics Act and PFAS in cosmetics (HSC 108980 series, from the stored leginfo bulk download)
  • Prop 65
  • California Safe Cosmetics Program reporting and fragrance allergen disclosure (HSC 111790-111795, including the 2020 Fragrance and Flavor Ingredient Right to Know Act)
Not read yet
  • CDPH ingredient disclosure beyond the reporting duties
  • amendments after the version ClaraDB holds
Packaged food and beveragesMain sourcesfrom 1 Jan 20251 area read · 2 not read yet

The Prop 65 chemical listings are stored for food and apply to it. California food laws and the food-specific warning methods are not covered. Federal US food rules apply through the US entry.

Sources read
  • Prop 65 chemical listings (27 CCR 27001), which apply to food
Not read yet
  • Prop 65 warning methods and content for food (27 CCR 25607.1 and 25607.2: the regulation text is stored, no rules are encoded from it); the consumer-product warning methods in 27 CCR 25600-25603 are encoded for home goods only
  • California food labelling and safety laws
Consumer electronics and small appliancesMain sourcesfrom 1 Jan 20255 areas read · 5 not read yet

Proposition 65, the connected-device security law (Civil Code 1798.91.04 to 1798.91.06) and the retailer duties of the battery-embedded waste recycling fee (Public Resources Code 42464(c), (f), with the 42463 definitions) are covered; the battery-embedded manufacturer label and retailer notice (Public Resources Code 42466.1, 42466.2) and the Title 20 MAEDbS listing of embedded battery chargers (20 CCR 1606(a), 1608(a)(1)) are stored; other California statute texts for electronics are not.

Sources read
  • Prop 65 generated warnings for electronics
  • battery-embedded waste recycling fee: the retailer collects it and states it on the receipt (Public Resources Code 42463, 42464; earbuds, speakers, cameras, wearables, power banks, electric toothbrushes and shavers)
  • security of connected devices (Civil Code 1798.91.04-1798.91.06, SB 327)
  • battery-embedded product manufacturer label and annual retailer notice (Public Resources Code 42466.1, 42466.2)
  • Title 20 MAEDbS listing of federally regulated battery chargers embedded in a product (20 CCR 1606(a), 1608(a)(1))
Not read yet
  • Electronic Waste Recycling Act screen fee for video display devices over 4 inches (Public Resources Code 42464(a))
  • Appliance Efficiency Regulations (Title 20) other than the MAEDbS listing of embedded battery chargers
  • DTSC Safer Consumer Products
  • SB 244 right to repair duties
  • state EPR for batteries
Batteries, e-bikes and power banksNot coveredNo sources read yet

California (US state): ClaraDB stores no laws for this market yet (not stored: California battery laws (Responsible Battery Recycling Act of 2022, SB 1215; Cal. Health and Safety Code 25215 ff universal waste battery rules; Prop 65 battery-related warnings stored separately); leginfo.legislature.ca.gov returns a Cloudflare challenge (HTTP 403) to automated access).

Types

Rules by type

What the rules for consumer electronics and small appliances require. Pick a type to filter the laws below.

Laws

Rules by law

1,005 of 1,077 rules match the industry. Open a law to read its rules.

California security of connected devices (SB 327 / AB 1906, Civil Code Title 1.81.26), as amended by AB 2392Cal. Civ. Code 1798.91.04-1798.91.062 rulesIn force from: 1 Jan 2020Industries: Electronics, Batteries
Requirement
Applies when
Effective
Source
Conformity

Manufacturer of a connected device must equip it with a reasonable security feature that fits its function and the information it holds and protects it from unauthorized access

Must meet the conditions of A manufacturer of a connected device shall equip the device with a reasonable security feature or features that are (1) appropriate to the nature and function of the device, (2) appropriate to the information it may collect, contain, or transmit, and (3) designed to protect the device and any information contained therein from unauthorized access, destruction, use, modification, or disclosure. Connected device (CIV 1798.91.05(b)): “Connected device” means any device, or other physical object that is capable of connecting to the internet, directly or indirectly, and that is assigned an internet protocol address or Bluetooth address. Manufacturer (1798.91.05(c)): “the person who manufactures, or contracts with another person to manufacture on the person’s behalf, connected devices that are sold or offered for sale in California.”

Exemptions (4)

No duty relating to unaffiliated third-party software or applications that a user chooses to add to the connected device

“This title shall not be construed to impose any duty upon the manufacturer of a connected device related to unaffiliated third-party software or applications that a user chooses to add to a connected device.”
CIV 1798.91.06(a) · fetched 2026-10-25California Legislature (Legislative Counsel): Cal. Civ. Code 1798.91.04-1798.91.06(opens in a new tab)

Does not apply to a connected device whose functionality is subject to security requirements under federal law, regulations or guidance of a federal agency

“This title shall not apply to any connected device the functionality of which is subject to security requirements under federal law, regulations, or guidance promulgated by a federal agency pursuant to its regulatory enforcement authority.”
CIV 1798.91.06(d) · fetched 2026-10-25California Legislature (Legislative Counsel): Cal. Civ. Code 1798.91.04-1798.91.06(opens in a new tab)

A person subject to HIPAA or the Confidentiality of Medical Information Act is not subject to this title for any activity those acts regulate

“shall not be subject to this title with respect to any activity regulated by those acts.”
CIV 1798.91.06(h) (excerpt) · fetched 2026-10-25California Legislature (Legislative Counsel): Cal. Civ. Code 1798.91.04-1798.91.06(opens in a new tab)

A manufacturer may instead satisfy subdivision (a) by ensuring the device meets the baseline product criteria of a NIST conforming labeling scheme, satisfies a conformity assessment that includes a third-party test, inspection or certification, and bears the binary label

“A manufacturer of a connected device may elect to satisfy the requirements of subdivision (a) by ensuring the connected device does all of the following:”
CIV 1798.91.04(c) · fetched 2026-10-25California Legislature (Legislative Counsel): Cal. Civ. Code 1798.91.04-1798.91.06(opens in a new tab)
Penalty

No private right of action; the Attorney General, a city attorney, a county counsel or a district attorney has the exclusive authority to enforce (no penalty amount is stated in these sections)

“The Attorney General, a city attorney, a county counsel, or a district attorney shall have the exclusive authority to enforce this title.”
CIV 1798.91.06(e) · fetched 2026-10-25California Legislature (Legislative Counsel): Cal. Civ. Code 1798.91.04-1798.91.06(opens in a new tab)

Official text, current to 19 Oct 2026. California Legislature's own bulk statute data (pubinfo_2025.zip, last modified 2026-10-19).

  • Connects to the internet or a network
  • Your role: Manufacturer

Depends on: internet connectable, economic operator role

In force since 1 Jan 2020

Applies to products sold on or after 1 Jan 2020

Stated: “This title shall become operative on January 1, 2020.” (1798.91.06(i)).

“A manufacturer of a connected device shall equip the device with a reasonable security feature or features that are all of the following:”
CIV 1798.91.04(a) · fetched 2026-10-25California Legislature (Legislative Counsel): Cal. Civ. Code 1798.91.04-1798.91.06(opens in a new tab)
Conformity

A connected device with authentication from outside the local network: a unique preprogrammed password per device, or a new password set before first use

Must meet the conditions of A connected device equipped with a means for authentication outside a local area network is deemed to have a reasonable security feature if the preprogrammed password is unique to each device manufactured, or the device requires a user to generate a new means of authentication before access is granted for the first time. Connected device (CIV 1798.91.05(b)): “Connected device” means any device, or other physical object that is capable of connecting to the internet, directly or indirectly, and that is assigned an internet protocol address or Bluetooth address. Manufacturer (1798.91.05(c)): “the person who manufactures, or contracts with another person to manufacture on the person’s behalf, connected devices that are sold or offered for sale in California.”

Exemptions (3)

No duty relating to unaffiliated third-party software or applications that a user chooses to add to the connected device

“This title shall not be construed to impose any duty upon the manufacturer of a connected device related to unaffiliated third-party software or applications that a user chooses to add to a connected device.”
CIV 1798.91.06(a) · fetched 2026-10-25California Legislature (Legislative Counsel): Cal. Civ. Code 1798.91.04-1798.91.06(opens in a new tab)

Does not apply to a connected device whose functionality is subject to security requirements under federal law, regulations or guidance of a federal agency

“This title shall not apply to any connected device the functionality of which is subject to security requirements under federal law, regulations, or guidance promulgated by a federal agency pursuant to its regulatory enforcement authority.”
CIV 1798.91.06(d) · fetched 2026-10-25California Legislature (Legislative Counsel): Cal. Civ. Code 1798.91.04-1798.91.06(opens in a new tab)

A person subject to HIPAA or the Confidentiality of Medical Information Act is not subject to this title for any activity those acts regulate

“shall not be subject to this title with respect to any activity regulated by those acts.”
CIV 1798.91.06(h) (excerpt) · fetched 2026-10-25California Legislature (Legislative Counsel): Cal. Civ. Code 1798.91.04-1798.91.06(opens in a new tab)

Official text, current to 19 Oct 2026. California Legislature's own bulk statute data (pubinfo_2025.zip, last modified 2026-10-19).

  • Connects to the internet or a network
  • Your role: Manufacturer

Depends on: internet connectable, economic operator role

In force since 1 Jan 2020

Applies to products sold on or after 1 Jan 2020

Stated: “This title shall become operative on January 1, 2020.” (1798.91.06(i)).

“if a connected device is equipped with a means for authentication outside a local area network, it shall be deemed a reasonable security feature under subdivision (a) if either of the following requirements are met:”
CIV 1798.91.04(b) (excerpt) · fetched 2026-10-25California Legislature (Legislative Counsel): Cal. Civ. Code 1798.91.04-1798.91.06(opens in a new tab)
  • Conformity

    Manufacturer of a connected device must equip it with a reasonable security feature that fits its function and the information it holds and protects it from unauthorized access

    Must meet the conditions of A manufacturer of a connected device shall equip the device with a reasonable security feature or features that are (1) appropriate to the nature and function of the device, (2) appropriate to the information it may collect, contain, or transmit, and (3) designed to protect the device and any information contained therein from unauthorized access, destruction, use, modification, or disclosure. Connected device (CIV 1798.91.05(b)): “Connected device” means any device, or other physical object that is capable of connecting to the internet, directly or indirectly, and that is assigned an internet protocol address or Bluetooth address. Manufacturer (1798.91.05(c)): “the person who manufactures, or contracts with another person to manufacture on the person’s behalf, connected devices that are sold or offered for sale in California.”

    Exemptions (4)

    No duty relating to unaffiliated third-party software or applications that a user chooses to add to the connected device

    “This title shall not be construed to impose any duty upon the manufacturer of a connected device related to unaffiliated third-party software or applications that a user chooses to add to a connected device.”
    CIV 1798.91.06(a) · fetched 2026-10-25California Legislature (Legislative Counsel): Cal. Civ. Code 1798.91.04-1798.91.06(opens in a new tab)

    Does not apply to a connected device whose functionality is subject to security requirements under federal law, regulations or guidance of a federal agency

    “This title shall not apply to any connected device the functionality of which is subject to security requirements under federal law, regulations, or guidance promulgated by a federal agency pursuant to its regulatory enforcement authority.”
    CIV 1798.91.06(d) · fetched 2026-10-25California Legislature (Legislative Counsel): Cal. Civ. Code 1798.91.04-1798.91.06(opens in a new tab)

    A person subject to HIPAA or the Confidentiality of Medical Information Act is not subject to this title for any activity those acts regulate

    “shall not be subject to this title with respect to any activity regulated by those acts.”
    CIV 1798.91.06(h) (excerpt) · fetched 2026-10-25California Legislature (Legislative Counsel): Cal. Civ. Code 1798.91.04-1798.91.06(opens in a new tab)

    A manufacturer may instead satisfy subdivision (a) by ensuring the device meets the baseline product criteria of a NIST conforming labeling scheme, satisfies a conformity assessment that includes a third-party test, inspection or certification, and bears the binary label

    “A manufacturer of a connected device may elect to satisfy the requirements of subdivision (a) by ensuring the connected device does all of the following:”
    CIV 1798.91.04(c) · fetched 2026-10-25California Legislature (Legislative Counsel): Cal. Civ. Code 1798.91.04-1798.91.06(opens in a new tab)
    Penalty

    No private right of action; the Attorney General, a city attorney, a county counsel or a district attorney has the exclusive authority to enforce (no penalty amount is stated in these sections)

    “The Attorney General, a city attorney, a county counsel, or a district attorney shall have the exclusive authority to enforce this title.”
    CIV 1798.91.06(e) · fetched 2026-10-25California Legislature (Legislative Counsel): Cal. Civ. Code 1798.91.04-1798.91.06(opens in a new tab)

    Official text, current to 19 Oct 2026. California Legislature's own bulk statute data (pubinfo_2025.zip, last modified 2026-10-19).

    Applies when
    • Connects to the internet or a network
    • Your role: Manufacturer

    Depends on: internet connectable, economic operator role

    Effective

    In force since 1 Jan 2020

    Applies to products sold on or after 1 Jan 2020

    Stated: “This title shall become operative on January 1, 2020.” (1798.91.06(i)).

    Source
    “A manufacturer of a connected device shall equip the device with a reasonable security feature or features that are all of the following:”
    CIV 1798.91.04(a) · fetched 2026-10-25California Legislature (Legislative Counsel): Cal. Civ. Code 1798.91.04-1798.91.06(opens in a new tab)
  • Conformity

    A connected device with authentication from outside the local network: a unique preprogrammed password per device, or a new password set before first use

    Must meet the conditions of A connected device equipped with a means for authentication outside a local area network is deemed to have a reasonable security feature if the preprogrammed password is unique to each device manufactured, or the device requires a user to generate a new means of authentication before access is granted for the first time. Connected device (CIV 1798.91.05(b)): “Connected device” means any device, or other physical object that is capable of connecting to the internet, directly or indirectly, and that is assigned an internet protocol address or Bluetooth address. Manufacturer (1798.91.05(c)): “the person who manufactures, or contracts with another person to manufacture on the person’s behalf, connected devices that are sold or offered for sale in California.”

    Exemptions (3)

    No duty relating to unaffiliated third-party software or applications that a user chooses to add to the connected device

    “This title shall not be construed to impose any duty upon the manufacturer of a connected device related to unaffiliated third-party software or applications that a user chooses to add to a connected device.”
    CIV 1798.91.06(a) · fetched 2026-10-25California Legislature (Legislative Counsel): Cal. Civ. Code 1798.91.04-1798.91.06(opens in a new tab)

    Does not apply to a connected device whose functionality is subject to security requirements under federal law, regulations or guidance of a federal agency

    “This title shall not apply to any connected device the functionality of which is subject to security requirements under federal law, regulations, or guidance promulgated by a federal agency pursuant to its regulatory enforcement authority.”
    CIV 1798.91.06(d) · fetched 2026-10-25California Legislature (Legislative Counsel): Cal. Civ. Code 1798.91.04-1798.91.06(opens in a new tab)

    A person subject to HIPAA or the Confidentiality of Medical Information Act is not subject to this title for any activity those acts regulate

    “shall not be subject to this title with respect to any activity regulated by those acts.”
    CIV 1798.91.06(h) (excerpt) · fetched 2026-10-25California Legislature (Legislative Counsel): Cal. Civ. Code 1798.91.04-1798.91.06(opens in a new tab)

    Official text, current to 19 Oct 2026. California Legislature's own bulk statute data (pubinfo_2025.zip, last modified 2026-10-19).

    Applies when
    • Connects to the internet or a network
    • Your role: Manufacturer

    Depends on: internet connectable, economic operator role

    Effective

    In force since 1 Jan 2020

    Applies to products sold on or after 1 Jan 2020

    Stated: “This title shall become operative on January 1, 2020.” (1798.91.06(i)).

    Source
    “if a connected device is equipped with a means for authentication outside a local area network, it shall be deemed a reasonable security feature under subdivision (a) if either of the following requirements are met:”
    CIV 1798.91.04(b) (excerpt) · fetched 2026-10-25California Legislature (Legislative Counsel): Cal. Civ. Code 1798.91.04-1798.91.06(opens in a new tab)

Categories

Categories with rules

The product categories with the most rules here, sub-categories included.

Sources

Sources

Where the rules come from, and when we last checked each source.

Show 21 more

Alerts

Get an email when these rules change.

Check a product free, no account needed. Save it, and you see when a rule that affects it changes, and Team emails you the day it does.

Check a productStart a workspace

Free for 10 products. Email alerts from $39 a month. See pricing