Relating to affirmative defenses for entities using cybersecurity programs

Where it is now

1. ✓
   Done: IntroducedFebruary 9, 2023
2. ✓
   Done: SubcommitteeFebruary 9, 2023
3. ✓
   Done: House committeeFebruary 28, 2023
4. ✓
   Done: Passes the HouseMarch 15, 202397–0
5. ✓
   Done: Senate committeeMarch 30, 2023
6. ✓
   Done: Passes the SenateApril 19, 202350–0
7. ✓
   Done: To the GovernorMay 3, 2023
8. ✓
   Done: Signed into lawMay 3, 2023

Signed into law What’s a funnel?

Amendments · 2

2 adopted · 0 failed. Newest first.

• S-3155Strike everything · filed April 19, 2023 by Sen. Mike Bousselot (R)

  AI summary This amendment replaces the entire bill with a new version that defines the terms and rules for businesses to use a cybersecurity program as a legal defense. It specifies that a business's program is considered appropriate if the cost to run it is at least equal to the business's calculated maximum probable loss from a data breach. It also lists specific industry-recognized frameworks and federal regulations that a business can follow to qualify for this defense. Its wording →

  Amends this SF 495 to CONFORM to HF 553
  Adopted
  April 19, 2023
• H-1071 · filed March 8, 2023 by

  AI summary This amendment changes the deadline for when companies must follow the cybersecurity program requirements, stating they must comply no later than the date the law takes effect. Its wording →
  Adopted
  March 15, 2023