IoT Goes Federal under Newly Signed Law
Client Alert | 1 min read | 12.10.20
Last week, the President signed the Internet of Things (IoT) Cybersecurity Improvement Act into law, kicking off a multi-year process that will culminate in the first-ever federal requirements for IoT devices. Under the law, the National Institute of Standards & Technology (NIST) is now charged with drafting and finalizing security requirements for IoT devices, as well as guidelines for managing disclosures about those devices’ security vulnerabilities. In two short years, the federal government will then be prohibited from procuring IoT devices unless (1) the devices meet the pending NIST requirements; or (2) the devices are granted a formal waiver by an agency Chief Information Officer. In addition to creating yet another cybersecurity regime for the government contracting community, the law will create a new benchmark for consumer-facing companies to consider when assessing and complying with the growing number of states imposing their own “reasonable security” requirements for IoT devices.
Contacts

Partner, Crowell Global Advisors Senior Director
- Washington, D.C.
- D | +1.202.624.2698
- Washington, D.C. (CGA)
- D | +1 202.624.2500
Insights
Client Alert | 5 min read | 10.22.25
Sixth Circuit Reaffirms Privilege Protections During Internal Investigations
On October 3, 2025, the Sixth Circuit reaffirmed that the attorney-client privilege and the work-product doctrine protections apply to materials created during attorney-led internal investigations. In re FirstEnergy Corp., No. 24-3654 (6th Cir. Oct. 3, 2025).
Client Alert | 4 min read | 10.21.25
Pivot Point for 340B: HRSA Rebate Model Pilot Program Approaches Launch
Client Alert | 5 min read | 10.20.25
What’s new for Belgian Construction Contracts under the New Book 7 of the Civil Code
Client Alert | 3 min read | 10.17.25
California Enacts New Requirements and Restrictions for Health Care Transactions


