Security Solutions and the “Right to Repair” Movement

When most people hear “right to repair,” they think about the movement by consumers and independent repair shops to be able to fix your smartphone when you drop it or get it wet, or the clash between U.S. farmers and industrial giants like John Deere over access to technical data so that farmers can work on their tractors.

In the security industry, the Security Industry Association (SIA) and its coalition of security solution developers and manufacturers have kept a close eye on this movement, because while it might benefit farmers or your ability to affordably fix your phone, it could also give attackers the information they would need to disable or circumvent electronic security and life safety systems.

In 2023, the “right to repair” movement has inspired a flurry of draft legislation, and such legislation is active and moving through many U.S. states. SIA has been tracking this legislation and has counted 25 states that have had active legislation in 2023, according to SIA Senior Manager of Government Relations Colby Williams.

The industry’s focus, led by SIA and working in tandem with other partners, has been to recommend that each state considering “right to repair” legislation place an exemption for security and life safety equipment so that such solutions are not exposed to unnecessary cybersecurity risk or physical security intrusions.

There’s a sign that legislators are recognizing the importance of such a distinction and incorporating that distinction into their legislation. On March 3, New York Gov. Kathy Hochul signed into law a measure finalizing the Digital Fair Repair Act, which will go into effect on July 1. Hochul first approved the bill in December after reaching an agreement with the bill sponsors to make key clarifications and changes through a subsequent “chapter amendment.” The act broadly requires manufacturers of electronic products to provide diagnostic and repair information, such as manuals and diagrams, to product owners and repair providers to facilitate repairs independently, but these obligations do not apply to manufacturers of home “security devices or alarm systems,” or to nonconsumer products sold to a business or to the government.

SIA led industry efforts to work with the governor’s office and with partners like the New York Electronic Life Safety Association.

According to Williams, this change is significant, as New York is now the first state to adopt right to repair legislation that has appropriately excluded security and life safety products. It’s a very positive first sign that the industry’s need for an exemption is being recognized by legislators and policy makers.