The new California Law covering IoT devices is due to come into action on 1st January 2020, apparently it could be worst than GDPR.
https://staceyoniot.com/is-the-world-ready-for-californias-new-iot-laws/
Regards
Caute_cautim