Code Change Summary: The 2026 NEC^® revises Section 240.6(D) on remotely accessible adjustable-trip circuit breakers by clarifying the language and adding a new Informational Note 4 on cybersecurity recommendations.

SME commentary: In the 2023 NEC^®, Section 240.6(D) was a brand-new addition that addressed the growing use of remotely adjustable electronic circuit breakers. These devices allow settings to be changed from a computer, tablet, or smartphone, introducing both convenience and vulnerability. The 2023 rules in 240.6(D)(2) required that when such breakers are accessible through a networked interface, either the breaker and associated software be identified as evaluated for cybersecurity, or a cybersecurity assessment of the network be completed with documentation available for inspection, operation, and maintenance. Three informational notes supplemented this requirement by pointing to assessment standards, compliance and certification examples, and the need for ongoing monitoring of cyber vulnerabilities.

For the 2026 NEC^®, Sections 240.6(B), 240.6(C), and 240.6(D) were refined but not fundamentally changed. The most notable update is the addition of Informational Note 4 under 240.6(D), which directs users to NEMA CY 70001-2023, Cybersecurity Implementation Guidance for Connected Electrical Infrastructure, for recommendations on meeting cybersecurity requirements. The existing informational notes already explain the importance of cybersecurity assessments and the need to show that systems have been evaluated for vulnerabilities, but they stopped short of pointing to specific resources on how to achieve cybersecurity compliance. Informational Note 4 fills that gap by guiding AHJs, engineers, and contractors toward recognized sources of guidance for protecting network connected circuit breakers, whether through accepted industry practices, consensus standards, or the utilization of compensating controls that provide equivalent protection.

The addition of Informational Note 4 marks the NEC’s intent to keep pace with the rapid growth of connected electrical equipment. As electronic trip breakers with remote capabilities become more common, these clarifications will help prevent cyber vulnerabilities from undermining the fundamental protective role of circuit breakers and the loads they supply.

Editorial clarifications were also made in 240.6(D) to ensure that the section clearly applies only when local restricted access to the circuit breaker is provided, and remote access is achieved by either connection through a local nonnetworked interface, or connection through a networked interface in compliance with 240.6(D)(2)(b).

The significance of these changes is that the NEC^® continues to reinforce cybersecurity as a safety issue without overstepping into prescribing detailed technical standards. By using informational notes, the Code provides practical references while still leaving flexibility for evolving technology and best practices. The 2026 refinements ensure that inspectors have clearer direction and that designers and installers can submit documentation with confidence that it aligns with current expectations.

Below is a preview of the NEC^®. See the actual NEC^® text at NFPA.ORG for the complete code section. Once there, click on their link to free access to the 2026 NEC^® edition of NFPA 70.

2023 Code Language:

240.6(B) Adjustable-Trip Circuit Breakers. The rating of adjustable-trip circuit breakers having external means for adjusting the current setting (long-time pickup setting), not meeting the requirements of 240.6(C), shall be the maximum setting possible.

240.6(C) Local Restricted Access Adjustable-Trip Circuit Breakers. A circuit breaker(s) that has restricted access to the adjusting means shall be permitted to have an ampere rating(s) that is equal to the adjusted current setting (long-time pickup setting). Restricted access shall be achieved by one of the following methods: (See the actual NEC^® for remaining text)

240.6(D) Remotely Accessible Adjustable-Trip Circuit Breakers. A circuit breaker(s) that can be adjusted remotely to modify the adjusting means shall be permitted to have an ampere rating(s) that is equal to the adjusted current setting (long-time pickup setting). Remote access shall be achieved by one of the following methods: (See the actual NEC^® for remaining text)

2026 Code Language:

240.6(B) Adjustable-Trip Circuit Breakers. The rating of adjustable-trip circuit breakers having external means for adjusting the current setting (long-time pickup setting) shall be the maximum setting possible unless otherwise permitted in 240.6(C) or 240.6(D).

240.6(C) Local Restricted Access Adjustable-Trip Circuit Breakers. A circuit breaker(s) that cannot be adjusted remotely to modify the current setting (long-time pickup setting) and has restricted access to the adjusting means shall be permitted to have an ampere rating(s) that is equal to the adjusted current setting (long-time pickup setting). Restricted access shall be achieved by one of the following methods: (See the actual NEC^® for remaining unchanged text.)

240.6(D) Remotely Accessible Adjustable-Trip Circuit Breakers. Circuit breakers that can be adjusted remotely to modify the current setting (long-time pickup setting) shall be permitted to have an ampere rating(s) that is equal to the adjusted current setting (long-time pickup setting) only when local restricted access to the circuit breaker is achieved by 240.6(C)(1), 240.6(C)(2), 240.6(C)(3), or 240.6(C)(4) and remote access is achieved by one of the following methods: (See the actual NEC^® for remaining text with only minor editorial changes.)

Informational notes 1, 2, and 3 remain unchanged from the previous NEC^® edition.

N Informational Note No. 4: See NEMA CY70001-2023, Cybersecurity Implementation Guidance for Connected Electrical Infrastructure, for recommendations on how to meet this requirement.