It's a start but not a lot of teeth in this law. One of the real challenges is teaching end users how to securely implement IoT on their home or business networks. The network team at most companies know better than to have a flat network but most home users have a large and growing number of IoT devices on the same network as their more sensitive systems.
I wrote an article on basic network segmentation. Of course this is aimed at readers who are technically limited and don't understand vlans and likely wouldn't have that type of hardware at home.