This bill requires the Federal Trade Commission (FTC) in coordination with the National Institute of Standards and Technology and relevant private sector stakeholders and experts to develop voluntary educational cybersecurity resources for consumers relating to the protection and use of the Internet of Things (devices, applications, and physical objects that are Internet-enabled, networked, or connected).

The resources must be technology-neutral and include guidance, best practices, and advice for consumers to protect against, mitigate, and recover from cybersecurity threats or security vulnerabilities.

The resources do not bind the FTC to any particular guidance, best practice, or advice. The FTC may not base an enforcement action on any failure to promote or use such guidance, best practice, or advice unless such practice violates another provision of law.