The now-expired 115th Congress left behind plenty of unfinished cyber business — rules for driverless cars and reauthorizing the DHS, for instance — but there’s a sleeper cyber issue that could grab lawmakers by their digital lapels: legislation setting security controls and expectations around the so-called “Internet of Things,” which includes everything from mobile phones to connected cars.

The potential for hacks affecting traffic lights, airplane controls, or even children’s toys has created lurid cyber scenarios. Business groups are exceedingly worried about security issues, liability, and reputational harm related to IoT devices, while consumers are inundated with warnings about their devices being hacked.