HF 553: Relating to affirmative defenses for entities using cybersecurity programs

What it does

This bill creates affirmative defenses for entities using cybersecurity programs. The bill provides that a covered entity seeking an affirmative defense must use a cybersecurity program for the protection of personal information and restricted information and the cybersecurity program must reasonably conform to an industry-recognized cybersecurity framework. A cybersecurity program must continually evaluate and mitigate reasonably anticipated threats, periodically evaluate the maximum probable loss attainable from a data breach, and communicate to affected parties the risk posed and actions the affected parties could take to reduce damages if a data breach has occurred.

House subcommittee · named February 9, 2023

• Rep. Barb Kniff McCulla (R) · barb.kniffmcculla@legis.iowa.gov
• Rep. Thomas Jay Moore (R) · tom.moore@legis.iowa.gov
• Rep. Josh Turek (D) · josh.turek@legis.iowa.gov

Lobbying · 4 for, 2 against

For: Iowa Credit Union League; Meidh Technologies, Inc; Technology Association of Iowa; Wellmark, Inc.

Against: Iowa Association for Justice; Meidh Technologies, Inc

In plain words

1. February 9, 2023Filed in the House and sent to the Economic Growth and Technology committee · as HSB 154
2. February 9, 2023House subcommittee named: Kniff McCulla, Moore, T. and Turek · as HSB 154
3. February 21, 2023Subcommittee recommended passing it · as HSB 154
4. February 28, 2023Approved by the House committee · as HSB 154
5. March 2, 2023Filed in the House
6. March 2, 2023Approved by the House committee, and given a new number: HF 553 · as HSB 154
7. March 15, 2023Passed the House, 97–0
8. March 16, 2023Arrived in the Senate
9. April 19, 2023Took the place of SF 495 on the Senate floor (the same legislation)
10. April 19, 2023Passed the Senate, 50–0
11. May 3, 2023Sent to the Governor
12. May 3, 2023Signed into law