Smartphone ‘kill switch’ law takes effect in California
Richard Nieva / CNET :
Context & Ripple Effects
The law lands on top of evidence that the feature it mandates actually works: Reuters reported that the iPhone kill switch cut smartphone thefts by 40% in San Francisco, 25% in New York City, and 50% in London. California's statute converts that voluntary feature into a baseline requirement for any smartphone sold in the state.
It also arrives in a busy stretch for California device policy — weeks after the state Senate approved requiring warrants before police can search smartphones and tablets, keeping the legislature on both sides of mobile security: protecting owners' data and making stolen devices worthless.
First-order effects
- Every new smartphone sold at California retail must ship with an anti-theft kill switch enabled, putting compliance burden on Apple, Samsung, and other handset makers selling into the largest US state market.
- Consumers in San Francisco and other high-theft cities are the immediate beneficiaries, where the kill switch has already been shown to sharply reduce iPhone thefts.
Second-order effects
- Other states and municipalities that lobbied carriers over theft rates get a de facto national standard, since manufacturers rarely ship separate hardware or software configurations just for one state.
- Carriers lose a revenue stream tied to replacement sales and insurance claims as stolen-phone resale value collapses once activation lock becomes universal.
Third-order effects
- The kill switch law sets the template for California's later first-in-the-nation device mandates, including the IoT 'reasonable security' bill that reached the governor's desk in 2018 — a pattern of one large state legislating defaults for the whole industry.
- It also foreshadows the tension seen when a 2016 assembly member proposed banning unbreakable-encryption smartphones: mandated security features and law-enforcement access pull device design in opposite directions.
The trend: California is emerging as the de facto regulator of consumer device security, with each state mandate — kill switches, IoT security, privacy enforcement — setting defaults manufacturers apply nationwide.