California CodesBusiness and Professions Code - BPCDivision 8 — Special Business RegulationsChapter 34 — Network SecuritySection 22948.6

(a) A device that includes an integrated and enabled wireless access point, such as a premises-based wireless network router or wireless access bridge, that is for use in a small office, home office, or residential setting and that is sold as new in this state for use in a small office, home office, or residential setting shall be manufactured to comply with one of the following:

(1) Include in its software a security warning that comes up as part of the configuration process of the device. The warning shall advise the consumer how to protect his or her wireless network connection from unauthorized access. This requirement may be met by providing the consumer with instructions to protect his or her wireless network connection from unauthorized access, which may refer to a product manual, the manufacturer’s Internet Web site, or a consumer protection Internet Web site that contains accurate information advising the consumer on how to protect his or her wireless network connection from unauthorized access.

(2) Have attached to the device a temporary warning sticker that must be removed by the consumer in order to allow its use. The warning shall advise the consumer how to protect his or her wireless network connection from unauthorized access. This requirement may be met by advising the consumer that his or her wireless network connection may be accessible by an unauthorized user and referring the consumer to a product manual, the manufacturer’s Internet Web site, or a consumer protection Internet Web site that contains accurate information advising the consumer on how to protect his or her wireless network connection from unauthorized access.

(3) Provide other protection on the device that does all of the following:

(A) Advises the consumer that his or her wireless network connection may be accessible by an unauthorized user.

(B) Advises the consumer how to protect his or her wireless network connection from unauthorized access.

(C) Requires an affirmative action by the consumer prior to allowing use of the product.

Additional information may also be available in the product manual or on the manufacturer’s Internet Web site.

(4) Provide other protection prior to allowing use of the device, that is enabled without an affirmative act by the consumer, to protect the consumer’s wireless network connection from unauthorized access.

(b) This section shall only apply to devices that include an integrated and enabled wireless access point and that are used in a federally unlicensed spectrum.

(c) This section shall only apply to products that are manufactured on or after October 1, 2007.