LawSignals
July 2026
Critical infrastructure security, public sector cyber resilience, and data breach duties.
Cybersecurity Legislation Tracker is issued monthly. Receive each issue by email, with the bills behind it in your dashboard. 14-day trial.
Activity on the Cybersecurity Legislation Tracker was light in July 2026, with just three bills changing stage out of 413 matched to the tracker. Missouri accounted for the only enactments: SB 890, which repeals the Missouri Cybersecurity Commission along with several other administrative entities, and SB 999, a broad public-safety measure that creates new offenses for cyberharassment, cyberstalking, and related digital misconduct. At the federal level, S. 4429, the Connected Vehicle Security Act of 2026, was reported out of committee with an amended substitute.
| Measure | Bills |
|---|---|
| Matched to this Tracker | 413 |
| Signed into law in 2026 | 37 |
| New this month | 1 |
| Moved a stage | 3 |
| Passed a chamber | 2 |
| Signed into law this month | 2 |
| Vetoed this month | 0 |
| State | Bills that moved |
|---|---|
| MO | 2 |
| US | 1 |
Activity on the Cybersecurity Legislation Tracker was light in July 2026, with just three bills changing stage out of 413 matched to the tracker. Missouri accounted for the only enactments: SB 890, which repeals the Missouri Cybersecurity Commission along with several other administrative entities, and SB 999, a broad public-safety measure that creates new offenses for cyberharassment, cyberstalking, and related digital misconduct. At the federal level, S. 4429, the Connected Vehicle Security Act of 2026, was reported out of committee with an amended substitute.
| State | Bill | Title | Became law |
|---|---|---|---|
| CO | HB 1252 | Updates to State Emergency Response Departments & Divisions | 4 June 2026 |
| CO | SB 185 | Enhance Security of Office of Information Technology | 2 June 2026 |
| FL | HB 1081 | Cybersecurity Experiential Learning | 25 June 2026 |
| FL | SB 7024 | OGSR/Cybersecurity, Information Technology, and Operational Technology Information Companion: FL SPB 7024 | 10 June 2026 |
| FL | HB 1085 | Local Government Cyber Security | 22 May 2026 |
| KS | SB 51 | House Substitute for SB 51 by Committee on Legislative Modernization - Authorizing the chief information security officer to receive audit reports, updating statutes related to services provided by the chief information technology officer and authorizing the office of information technology services to provide certain services to political subdivisions and hospitals. | 10 April 2026 |
| KS | HB 2574 † | Removing the expiration on certain cybersecurity requirements, modifying the duties of chief information security officers and cybersecurity programs, requiring assessment of executive branch agency compliance with cybersecurity requirements, providing for consideration of such compliance by the legislature during the budget process and creating the judicial branch technology oversight council. | 9 April 2026 |
| LA | HB 1033 | CRIME: Provides relative to the definition of "critical infrastructure" | 15 May 2026 |
| LA | SB 75 † | INFORMATION TECHNOLOGY: Provides for reimbursement to the state for cyber reinforcement support provided to noncompliant recipients. (8/1/26) (EN SEE FISC NOTE SG RV) | 15 May 2026 |
| MD | HB 1335 | Department of Information Technology - Information Technology Staffing and Capability Assessment - Independent Study | 31 May 2026 |
| MD | HB 1239 | Public Safety - Critical Infrastructure Protection Companion: MD SB 825 | 12 May 2026 |
| MD | HB 593 | Criminal Law - Interference With Critical Infrastructure or a Public Safety Answering Point | 12 May 2026 |
| MD | HB 861 | Department of Information Technology - Statewide Information Technology Master Plan - Reporting | 12 May 2026 |
| MD | SB 482 | Criminal Law - Interference With Critical Infrastructure or a Public Safety Answering Point | 12 May 2026 |
| MD | SB 581 | Department of Information Technology - Statewide Information Technology Master Plan - Reporting | 12 May 2026 |
| MD | SB 825 | Public Safety - Critical Infrastructure Protection | 12 May 2026 |
| MD | HB 957 | Cybersecurity - Standards and Compliance - Alterations Companion: MD SB 601 | 14 April 2026 |
| MD | SB 601 | Cybersecurity - Standards and Compliance - Alterations | 14 April 2026 |
| ME | LD 2092 | An Act To Update Certain Terms And References Regarding Information Technology And Cybersecurity | 15 April 2026 |
| ME | LD 2103 | An Act Requiring Hospitals To Adopt Cybersecurity Plans | 13 April 2026 |
| MO | SB 890 | SS/SCS/SB 890 - This act requires each state department with oversight of an administrative entity to submit an annual report to the General Assembly detailing any administrative entity that has not convened a public meeting or conducted public business during the three year period ending on August 28th of such year.
The act further repeals and reassigns duties for a number of administrative entities. The Division of Workforce Development within the Department of Economic Development is renamed and moved to the Office of Workforce Development within the Department of Higher Education and Workforce Development. The Board for Certification of Interpreters is repealed and its duties assigned to the Missouri Commission for the Deaf and Hard of Hearing. The Life Sciences Research Board is repealed and its duties assigned the Department of Economic Development. The act repeals the Missouri Quality Home Care Council is repealed as well as all duties of the Council.
The act repeals the following entities: the Career Readiness Course Task Force; the Infection Control Advisory Panel; the Missouri Arthritis Advisory Board and the Arthritis Program Review Committee; the AgriMissouri Advisory Commission for Marketing Missouri Agricultural Products; the Coordinating Board for Early Childhood; the Minority Environmental Literacy Advisory Committee; the Missouri Cybersecurity Commission; the Small Business Compliance Advisory Committee; and the Commission on the Special Health, Psychological and Social Needs of Minority Older Individuals.
This act is similar to SB 729 (2025).
JIM ERTLE Signed this month | 13 July 2026 |
| Repeals the Missouri Cybersecurity Commission and reassigns or eliminates duties for numerous other administrative entities. Signed into law. | |||
| MO | SB 999 | SS#2/SB 999 - This act modifies several provisions relating to vulnerable persons.
ASSISTANCE FROM THE ATTORNEY GENERAL (Section 27.117)
Under this act, a prosecuting attorney may request assistance from the Attorney General for the prosecution of the certain sexual offenses.
This provision is identical to a provision in CCS/SS/SCS/HCS/HBs 2637 & 3155 (2026) and substantially similar to a provision in the truly agreed to and finally passed SS/SCS/HCS/HBs 2273 et al (2026).
"BORN-ALIVE ABORTION SURVIVORS PROTECTION ACT (Section 188.035)
This act creates the "Born-Alive Abortion Survivors Protection Act". Under this act, a child born alive during or after an abortion or attempted abortion shall have the same rights, privileges, and immunities as any other person, citizen, and resident of Missouri, including any other live-born child.
Any licensed, registered, or certified health care provider present in the provider's professional capacity at the time a child is born alive during or after an abortion or attempted abortion shall exercise the same degree of professional skill, care, and diligence to preserve the life, health, and comfort of the child as a reasonably diligent and conscientious provider would render to any other child born alive at the same gestational age.
Any person who knowingly performs or attempts to perform an overt act that kills a child born alive shall be guilty of first-degree murder.
A person shall have the right to bring a cause of action for wrongful death or improper health care, as described in this act.
This provision is similar to HCS/HBs 195 & 1119 (2025), SB 702 (2025), SCS/SB 753 (2022), provisions in SCS/HCS/HB 2012 (2022), HCS/HBs 1593 & 1959 (2022), SB 168 (2021), SB 665 (2020), and SB 388 (2019).
PREGNANCY-ASSOCIATED MORTALITY REVIEW BOARD (Section 192.990)
This act modifies the "Pregnancy-Associated Mortality Review Board" within the Department of Health and Senior Services. Under this act, board membership shall include at least one member from each congressional district with demographically diverse membership. Board members are increased from no more than 18 members to no more than 22 members.
Additionally, the board shall, in its study and review of maternal deaths, consider the level and timing of prenatal and postnatal care, the presence or absence of maternity care deserts, approaches taken in this state and other states to reduce or eliminate racial inequities in maternal deaths, and the adequacy of data collected by the board. Data reported by the board shall be disaggregated by race, ethnicity, language, nationality, age, zip code, and level and timing of prenatal and postnatal care.
This provision is identical to a provision in the truly agreed to and finally passed SS/SCS/HCS/HB 2372 (2026) and substantially similar to SCS/SB 871 (2026), SB 39 (2025), SCS/SBs 1357 & 888 (2024), and SCS/SBs 579 & 595 (2023).
RELEASE FROM JAIL (Section 544.667)
Currently, a person can be released from jail upon recognizance or bond. This act provides that a person that has been released under such circumstances that fails to comply with the conditions of such release that imposes no contact with the victim shall be guilty of a class A misdemeanor and shall forfeit any security that was pledged for their release.
This provision is identical to a provision in CCS/SS/SCS/HCS/HBs 2637 & 3155 (2026) and SCS/SB 928 (2026).
CRIMINAL OFFENSES (Sections 455.050, 565.002, 565.050-565.056, 565.072-565.074, 565.090-565.091, 565.225-565.227, 565.400-565.405, 573.570, 573.575, and Section C)
This act modifies the offenses of assault in the first, second, third, and fourth degrees and the offenses of domestic violence in the first, second, third, and fourth degrees by removing the defined terms of "serious physical injury" and "physical injury" and providing for the following harms:
• Great bodily harm: Bodily injury which creates a high probability of death, or which causes serious permanent or protracted loss or impairment of function of any bodily member or organ, or other serious bodily harm;
• Substantial bodily harm: Bodily harm which involves a temporary but substantial disfigurement, or which causes temporary but substantial loss or impairment of the function of any bodily member or organ, or which causes a fracture of any bodily member; and
• Bodily harm: Physical pain or injury, illness, or any impairment of physical condition.
Under current law, the first offense of harassment in the first degree is a class E felony. This act provides that a second or subsequent conviction of harassment in the first degree shall be a class D felony where the individual has previously been found guilty of harassment in the first or second degree. Currently, a first offense of harassment in the second degree is a class A misdemeanor. Under this act, provisions relating to a second or subsequent conviction of harassment in the second degree are modified to include a conviction of harassment in the first degree as a previous conviction in which case it is a class E felony.
This act modifies the offense of stalking in the first degree by repealing the elements of such offense and providing that a person commits the offense of stalking in the first degree when the person knowingly, through a course of conduct that is directed at another person or through technological abuse, as defined in the act, engages in conduct that would cause a reasonable person under similar circumstances to:
• Fear death or bodily injury, as defined in this act;
• Fear that an offense will be committed against a member of the person's family, household members, or an individual with whom the person has a dating relationship;
• Fear that an offense will be committed against the person's property; or
• Feel harassed, terrified, or intimidated.
This act modifies the offense of stalking in the second degree by repealing the elements of such offense and providing that a person commits the offense of stalking in the second degree when the person knowingly, through a course of conduct that is directed at another person or through technological abuse, as defined in the act, engages in conduct that would cause a reasonable person under similar circumstances to feel harassed, terrified, or intimidated.
This act creates the offense of cyberharassment. A person commits this offense if he or she purposely or knowingly engages in a threatening, aggressive, or otherwise fear-inducing, course of conduct by using digital technology, internet service providers, electronic service providers or other electronic communications and devices cause reasonable fear, alarm, anxiety, undo stress, or terror to others by repeated contact with no legitimate purpose. This offense shall be a class B misdemeanor upon a first offense and a class A misdemeanor for second or subsequent offenses.
A person commits the offense of cyberstalking if such person purposely or knowingly engages in a threatening, aggressive, or otherwise fear-inducing, course of conduct by using digital technology, internet service providers, electronic service providers or other electronic communications and devices to enhance the ability to intimidate, track, follow or cause reasonable fear, alarm, anxiety, undo stress, or terror to another person. A first offense shall be a class A misdemeanor and a second or subsequent offense shall be a class E felony.
These provisions are identical to provisions in CCS/SS/SCS/HCS/HBs 2637 & 3155 (2026) and SCS/SB 928 (2026).
This act creates the offense of disclosure of an intimate digital depiction. A person shall be guilty of such offense if he or she discloses or threatens to disclose an intimate digital depiction with the intent to harass or threaten another person.
A violation of such offense is a class D felony if the person discloses an intimate digital depiction and a class E felony if the person threatens to disclose an intimate digital depiction. Any second or subsequent violation of such offense is a class C felony. Additionally, it shall be a class C felony if the disclosure interferes with a government proceeding or causes violence.
This act creates the offense of sadistic online exploitation. A person commits this offense where he or she uses the internet to coerce a victim into committing certain acts. This offense shall be a class E felony.
These provisions are identical to provision in the truly agreed to and finally passed SS/SCS/HCS/HBs 2273 et al (2026), CCS/SS/SCS/HCS/HBs 2637 & 3155 (2026), and SCS/SB 928 (2026).
Provisions of this act have an effective date of July 1, 2027.
This act has a non-severability provision for the act.
SARAH HASKINS Signed this month | 13 July 2026 |
| Creates offenses for cyberharassment, cyberstalking, and disclosure of intimate digital depictions, among other public-safety provisions. Signed into law. | |||
| MS | SB 2096 † | MDITS and SOS; require to establish minimum cybersecurity standards for SEMS. | 19 March 2026 |
| NE | LB 937 | Adopt the Prior Learning Act and the K-12 Education Cybersecurity Act and change provisions relating to student transfers, school absences, option enrollment, extracurricular activities, reports, school employment, the improvement grant program, monitoring or providing instruction, deadlines, the Nebraska Teacher Apprenticeship Program, the Nebraska Teacher Recruitment and Retention Act, and the College Pathway Program Act | 17 April 2026 |
| NH | SB 589 † | relative to port electrification, microgrid development, and cybersecurity standards for energy and water systems. | 24 June 2026 |
| OK | SB 1859 † | Oklahoma State Bureau of Investigation; creating the Cyber Crime Fraud Unit; revolving fund. Effective date. Emergency. | 29 May 2026 |
| SD | SB 49 | safeguard the integrity, privacy, and security of genetic data and provide a civil penalty therefor. | 30 March 2026 |
| SD | SB 75 | amend the type of entities eligible to participate in the cybersecurity services initiative. | 4 March 2026 |
| UT | SB 275 | State-Endorsed Digital Identity Program Amendments | 25 March 2026 |
| UT | HB 450 | Data Privacy Amendments | 19 March 2026 |
| UT | HB 357 | Amendments to Motor Vehicle Data Privacy | 19 March 2026 |
| UT | HB 165 | Critical Infrastructure Amendments | 17 March 2026 |
| UT | SB 123 | Privacy and Cybersecurity Amendments | 17 March 2026 |
| UT | HB 19 | Drinking Water Utilities Amendments | 27 February 2026 |
| VA | HB 1334 | Militia state active duty; cyber-related support. | 8 April 2026 |
| WA | SB 5892 | Concerning protection of the voter registration database. | 25 March 2026 |
| WV | HB 5638 † | Relating to the requirements of the state’s cyber security program and responsibilities and authority of the state chief information security officer | 14 March 2026 |
| State | Bill | Title | Current status |
|---|---|---|---|
| OK | SB 626 † | Security Breach Notification Act; requiring notice of security breach of certain information; modifying provisions. Effective date. | Sent to governor |
| State | Bill | Title | Current status | Action |
|---|---|---|---|---|
| US | S. 4429 | Connected Vehicle Security Act of 2026 | Passed committee | 22 July 2026 |
| Addresses security requirements for connected vehicles. Reported out of committee with an amended substitute. | ||||
| State | Bill | Title | Current status |
|---|---|---|---|
| US | H.R. 9918 | Enhancing K–12 Cybersecurity Act | In committee |
| Type | Document | Date |
|---|---|---|
| Rule | Special Conditions: Honeywell Aerospace US LLC, Dassault Aviation Model Falcon 900EX Airplane; Electronic System Security Protection From Unauthorized External Access Transportation Department, Federal Aviation Administration Special conditions for aircraft digital systems architecture with external network connectivity and unauthorized access protection requirements. | Comments close 3 August 2026 |
| Proposed Rule | Enhancing Know-Your-Upstream-Provider Requirements and Strengthening STIR/SHAKEN (Call Authentication Trust Anchor; Advanced Methods To Target and Eliminate Unlawful Robocalls) Federal Communications Commission Proposes strengthened security requirements for voice service providers including authentication, verification, monitoring, and compliance measures. | Comments close 10 August 2026 |
| Proposed Rule | Safety Standard for Lithium-Ion Batteries Used in Micromobility Products and Electrical Systems of Micromobility Products Containing Such Batteries Consumer Product Safety Commission Proposes safety standard for lithium-ion batteries; tangentially relates to product security but primarily addresses product safety rather than cybersecurity or data security. | Comments close 24 August 2026 |
| Rule | Review of Submarine Cable Landing License Rules and Procedures To Assess Evolving National Security, Law Enforcement, Foreign Policy, and Trade Policy Risks Federal Communications Commission Establishes national security requirements and certification for submarine cable operators, addressing infrastructure security risks. | Comments close 26 August 2026 |
| Proposed Rule | Wireless Emergency Alerts; The Emergency Alert System; Modernization of the Nation's Alerting Systems Federal Communications Commission FCC Further Notice of Proposed Rulemaking seeking comment on rules to make Emergency Alert System and Wireless Emergency Alerts more resilient. | Comments close 31 August 2026 |
| Proposed Rule | Defense Federal Acquisition Regulation Supplement: Modifications to Printed Circuit Board Acquisition Restrictions (DFARS Case 2022-D011) Defense Department, Defense Acquisition Regulations System Seeks information on restrictions for covered printed circuit board acquisition, potentially addressing supply chain security. | Comments close 31 August 2026 |
| Proposed Rule | Request for Information; Clinical Laboratory Improvement Amendments of 1988 (CLIA) Regulations Health and Human Services Department, Centers for Medicare & Medicaid Services RFI seeks input on CLIA regulations including cybersecurity requirements for clinical laboratories. | Comments close 14 September 2026 |
| Type | Document | Date |
|---|---|---|
| Rule | Modernization of the Nation's Alerting Systems; Protecting the Nation's Communications Systems From Cybersecurity Threats Federal Communications Commission FCC rule requiring targeted cybersecurity improvements to protect Emergency Alert System from hijacking and cyberattacks. | Effective 29 September 2026 |
| State | Bill | Title | Current status |
|---|---|---|---|
| US | S. 4429 | Connected Vehicle Security Act of 2026 | Passed committee |
| State | Bill | Title | Current status | Last action |
|---|---|---|---|---|
| AK | HB 336 | An Act relating to use of campaign funds; and providing for an effective date. | In committee | 23 February 2026 |
| AK | SB 139 | An Act relating to who may own or hold certain land; relating to certain agreements having to do with critical infrastructure; and providing for an effective date. | In committee | 14 April 2025 |
| AL | HB 207 † | Office of Information Technology, duties expanded to include cybersecurity and tasks previously performed by Division of Data Systems Management and Telecommunications Division of the Department of Finance | Enacted | 14 May 2025 |
| AL | HB 208 | Secretary of Information Technology, duties regarding cybertechnology technology quality assurance for state agencies further provided | In committee | 6 February 2025 |
| AL | HB 587 | Information Technology Auditors, qualifications for being hired to perform audits on state chartered financial institutions specified | In committee | 17 April 2025 |
| AL | SB 74 | Public K-12 Education; cyber security education program required to be developed and implemented by the State Board of Education | In committee | 4 February 2025 |
| AR | HB 1549 | TO CREATE THE ARKANSAS CYBERSECURITY ACT OF 2025. | Enacted | 8 April 2025 |
| AR | HB 1666 † | TO AMEND THE LAW CONCERNING THE ARKANSAS SELF-FUNDED CYBER RESPONSE PROGRAM. | Enacted | 16 April 2025 |
| AZ | HB 2736 † | cybersecurity; data encryption; pilot program | Passed chamber | 24 March 2025 |
| AZ | HB 2809 | statewide cybersecurity encryption system; requirements | Passed chamber | 17 March 2026 |
| AZ | SB 1027 | critical telecommunications infrastructure; construction requirements | Vetoed | 18 April 2025 |
| AZ | SB 1088 † | appropriation; Arizona homeland security; cybersecurity | Passed chamber | 31 March 2026 |
| AZ | SB 1501 | grid security; cybersecurity; reviews; commission | Vetoed | 18 April 2025 |
| CA | AB 2265 | Emergency services: law enforcement and intelligence: state threat assessment center. | Introduced | 20 February 2026 |
| CA | AB 2281 † | Office of Elections Cybersecurity. | Enacted | 19 September 2026 |
| CA | AB 2298 † | Pupil instruction: computer science: content standards. | Enacted | 10 September 2026 |
| CA | AB 370 | California Public Records Act: cyberattacks. | Enacted | 14 July 2025 |
| CA | AB 869 | State agencies: information security: Zero Trust architecture. | Passed chamber | 29 August 2025 |
| CA | AB 979 | California Cybersecurity Integration Center: artificial intelligence. | Enacted | 3 October 2025 |
| CA | SB 446 | Data breaches: customer notification. | Enacted | 3 October 2025 |
| CA | SB 468 | High-risk artificial intelligence systems: duty to protect personal information. | Dead | 2 February 2026 |
| CA | SB 833 | Critical infrastructure: artificial intelligence systems: human oversight. | Passed chamber | 13 August 2026 |
| CO | HB 1252 | Updates to State Emergency Response Departments & Divisions | Enacted | 4 June 2026 |
| CO | SB 185 | Enhance Security of Office of Information Technology | Enacted | 3 June 2026 |
| CT | HB 5210 † | AN ACT ESTABLISHING VARIOUS DATA SECURITY REQUIREMENTS APPLICABLE TO CERTAIN FINANCIAL INSTITUTIONS. | Passed committee | 24 March 2026 |
| CT | HB 6003 † | AN ACT REQUIRING THE SECRETARY OF THE STATE TO REPORT ON THE ELECTION INFORMATION SECURITY ANALYST. | In committee | 22 January 2025 |
| CT | SB 117 † | AN ACT CONCERNING BREACHES OF SECURITY INVOLVING ELECTRONIC PERSONAL INFORMATION. | Passed chamber | 30 April 2026 |
| CT | SB 1319 † | AN ACT ESTABLISHING A CYBERSECURITY TASK FORCE. Companion: CT SB 273 | Passed committee | 1 April 2025 |
| CT | SB 403 † | AN ACT CONCERNING CYBERSECURITY. | In committee | 5 March 2026 |
| CT | SB 92 † | AN ACT CONCERNING PROTECTIONS FOR THE ONLINE ECONOMY AGAINST DATA BREACHES AND LIMITS ON INTERNET DATA USAGE. | In committee | 14 February 2025 |
| DC | B 26-0427 † | Cybersecurity and Accountability Act of 2025 | In committee | 22 September 2026 |
| DE | HB 381 † | AN ACT TO AMEND TITLE 6 OF THE DELAWARE CODE RELATING TO COMPUTER SECURITY BREACHES. | Enacted | 2 September 2026 |
| FL | HB 1081 | Cybersecurity Experiential Learning | Enacted | 26 June 2026 |
| FL | HB 1085 | Local Government Cyber Security | Enacted | 26 May 2026 |
| FL | HB 1183 | Cybersecurity Incident Liability | Dead | 16 June 2025 |
| FL | HB 1293 | Cybersecurity | Dead | 16 June 2025 |
| FL | HB 1379 † | Cybersecurity Risks from Unmanned Aircraft Systems Companion: FL SB 1358 | Dead | 16 June 2025 |
| FL | HB 381 | Office of Financial Regulation | Dead | 13 March 2026 |
| FL | HB 635 | Cybersecurity Standards and Liability Companion: FL SB 692 | Dead | 13 March 2026 |
| FL | HB 7013 | OGSR/Cybersecurity | Passed committee | 29 April 2025 |
| FL | HB 7023 | OGSR/Cybersecurity | Passed committee | 9 March 2026 |
| FL | HB 777 | Pub. Rec./Office of Financial Regulation | Dead | 13 March 2026 |
| FL | HB 925 | Threats from Foreign Nations | Dead | 16 June 2025 |
| FL | SB 1216 | Cybersecurity of Mortgage Brokers and Lenders and Money Services Businesses | Dead | 16 June 2025 |
| FL | SB 1266 | Cybersecurity Internships | Passed committee | 10 March 2026 |
| FL | SB 1440 | Public Records/Office of Financial Regulation | Dead | 13 March 2026 |
| FL | SB 1522 | Security of State Information Technology Systems | Dead | 13 March 2026 |
| FL | SB 1536 | Cybersecurity | Dead | 16 June 2025 |
| FL | SB 1576 | Cybersecurity Incident Liability | Dead | 16 June 2025 |
| FL | SB 394 | Elections | Dead | 16 June 2025 |
| FL | SB 480 | Information Technology | Dead | 13 March 2026 |
| FL | SB 54 | Criminal Offenses | Dead | 16 June 2025 |
| FL | SB 540 | Office of Financial Regulation | Dead | 13 March 2026 |
| FL | SB 576 | Local Government Cybersecurity | Passed committee | 11 March 2026 |
| FL | SB 7020 | OGSR/Agency Cybersecurity Information Companion: FL SPB 7020 | Enacted | 20 May 2025 |
| FL | SB 7024 | OGSR/Cybersecurity, Information Technology, and Operational Technology Information Companion: FL SPB 7024 | Enacted | 12 June 2026 |
| FL | SB 770 | Cybersecurity | Dead | 16 June 2025 |
| GA | HB 161 | Georgia Bureau of Investigation; authority to issue subpoenas of electronic communication records for purposes of investigating certain cyber enabled threats to life and property; provide | Enacted | 1 July 2025 |
| GA | HB 886 | State government; prohibit state agencies and local government entities from responding to ransomware activity | In committee | 4 April 2025 |
| GA | HR 817 | House Study Committee on Governmental Use of Drones and Unmanned Aircraft from Foreign Adversaries; create | Passed committee | 4 April 2025 |
| GU | B 262-38 † | AN ACT TO APPROPRIATE THE SUM OF EIGHT HUNDRED NINETY THOUSAND ($890,000) TO I LIHESLATURAN GUÅHAN FOR ITS CYBERSECURITY AND AUTOMATIONS NEEDS FOR FY 2026. | Introduced | - |
| HI | HCR 75 | REQUESTING THE DEPARTMENT OF EDUCATION AND UNIVERSITY OF HAWAII TO ASSESS THE CRITERIA REQUIRED TO ESTABLISH AN EDUCATIONAL PIPELINE AND CURRICULUM TO ENSURE THAT STUDENTS ACQUIRE THE NECESSARY SKILLS IN ADVANCED MANUFACTURING AND CYBERSECURITY. Companion: HI HR 67 | Passed chamber | 28 March 2025 |
| HI | SB 1038 | RELATING TO PRIVACY. | Passed chamber | 19 March 2025 |
| HI | SB 1038 | RELATING TO PRIVACY. Companion: HI SB 3016 | Passed chamber | 8 December 2025 |
| HI | SB 3015 | RELATING TO PERSONAL INFORMATION. | Passed chamber | 20 February 2026 |
| HI | SB 3184 | RELATING TO DIGITAL ASSETS. | In committee | 2 February 2026 |
| IA | HF 2452 | A bill for an act establishing the data security program within the department of education, and making appropriations. | In committee | 16 February 2026 |
| IA | HSB 609 | A bill for an act modifying the duties of the workforce development board, state board of education, and department of education related to cyber and artificial intelligence. Companion: IA HF 2528 | Passed committee | 16 February 2026 |
| IA | HSB 752 | A bill for an act relating to certain activities associated with foreign entities in the state, providing penalties, and making penalties applicable. Companion: IA HF 2646 | Passed committee | 19 February 2026 |
| IA | SF 2200 | A bill for an act relating to school email security by requiring school districts, charter schools, and area education agencies to implement certain email security standards. | In committee | 12 February 2026 |
| ID | H 117 | INSURANCE DATA SECURITY ACT – Adds to existing law to establish the Insurance Data Security Act in the event of cybersecurity attacks. | Passed committee | 20 March 2025 |
| ID | H 168 | CYBERSECURITY AND RESILIENCY FUND – Adds to existing law to establish a cybersecurity and resiliency fund to address the state’s need for information technology and cybersecurity infrastructure. Companion: ID H 421 | Introduced | 10 February 2025 |
| ID | H 277 | OFFICE OF INFORMATION TECHNOLOGY SERVICES – Amends existing law to provide for certain criminal history checks to be performed. | Enacted | 24 March 2025 |
| ID | H 35 | INFORMATION TECHNOLOGY SERVICES – Amends and adds to existing law to require the implementation of cybersecurity best practices and the use of multifactor identification in Idaho state government. Companion: ID H 4 | Enacted | 25 February 2025 |
| IL | HB 2334 | FOIA-CYBERSECURITY | In committee | 21 March 2025 |
| IL | HB 3119 | INFRASTRUCTURE PROTECTION ACT | Introduced | 18 February 2025 |
| IL | HB 3485 | IEMA-OHS UPDATES | In committee | 21 March 2025 |
| IL | HB 3576 | WATER UTILITY CYBERSECURITY | In committee | 27 March 2026 |
| IL | HB 4144 | IEMA-OHS-MABAS-ILEAS FUNDING | In committee | 27 March 2026 |
| IL | HB 4506 | ELEC CD-SECURE ELECTIONS FUND | In committee | 27 March 2026 |
| IL | HB 4528 | ELEC CD-CYBERSECURITY Companion: IL SB 3058 | In committee | 27 March 2026 |
| IL | SB 1363 | CYBERSECURITY TRAINING | Introduced | 29 January 2025 |
| IL | SB 1512 | CONSUMER FIN PROTECTION LAW | Introduced | 19 March 2025 |
| IL | SB 1542 | DOIT-POWERS AND DUTIES | Introduced | 4 February 2025 |
| IL | SB 2408 | IEMA-UPDATE Companion: IL HB 3620 | Enacted | 15 August 2025 |
| IL | SB 76 † | GOV IMMUNITY-DATA BREACHES | In committee | 21 March 2025 |
| IN | HB 1383 † | Indiana civilian cyber corps. | In committee | 13 January 2025 |
| IN | SB 313 † | Law enforcement data. | In committee | 23 January 2025 |
| IN | SB 472 † | Cybersecurity. | Enacted | 1 May 2025 |
| KS | HB 2270 † | Authorizing the chief information security officer to receive audit reports and updating statutes related to services provided by the chief information technology officer. | Passed committee | 19 February 2026 |
| KS | HB 2271 † | Removing the expiration of provisions relating to moving cybersecurity services under the chief information technology officer of each branch of government. | Dead | 10 April 2026 |
| KS | HB 2574 † | Removing the expiration on certain cybersecurity requirements, modifying the duties of chief information security officers and cybersecurity programs, requiring assessment of executive branch agency compliance with cybersecurity requirements, providing for consideration of such compliance by the legislature during the budget process and creating the judicial branch technology oversight council. | Enacted | 9 April 2026 |
| KS | SB 51 | House Substitute for SB 51 by Committee on Legislative Modernization - Authorizing the chief information security officer to receive audit reports, updating statutes related to services provided by the chief information technology officer and authorizing the office of information technology services to provide certain services to political subdivisions and hospitals. | Enacted | 10 April 2026 |
| KY | HB 280 | AN ACT relating to information technology systems and declaring an emergency. | In committee | 4 March 2025 |
| KY | SB 260 | AN ACT relating to cybersecurity. | In committee | 20 February 2025 |
| LA | HB 1033 | CRIME: Provides relative to the definition of "critical infrastructure" | Enacted | 15 May 2026 |
| LA | SB 75 † | INFORMATION TECHNOLOGY: Provides for reimbursement to the state for cyber reinforcement support provided to noncompliant recipients. (8/1/26) (EN SEE FISC NOTE SG RV) | Enacted | 15 May 2026 |
| MA | H 104 | An Act establishing the Massachusetts Data Privacy Act Companion: MA S 45, MA SD 267 | In committee | 17 November 2025 |
| MA | H 105 | An Act relative to electronic security for the Commonwealth Companion: MA HD 79 | In committee | 12 February 2026 |
| MA | H 3363 † | An Act relative to cyber procurement projects | In committee | 12 March 2026 |
| MA | H 358 | An Act relative to the security of personal financial information Companion: MA HD 3351 | In committee | 8 December 2025 |
| MA | H 4807 | An Act relative to updating the security of personal information | Passed committee | 8 December 2025 |
| MA | H 82 | An Act relative to cyberattack response in Massachusetts Companion: MA HD 1316 | Passed committee | 17 September 2025 |
| MA | H 89 † | An Act providing for consumer protection in a digital economy | In committee | 12 February 2026 |
| MA | H 93 | An Act relative to protecting sensitive information from security breaches Companion: MA HD 707 | Passed committee | 21 July 2025 |
| MA | HD 1336 † | An Act relative to cyber procurement projects | Introduced | - |
| MA | S 187 † | An Act relative to protecting biometric information under the security breach law Companion: MA SD 1559 | Passed committee | 31 December 2025 |
| MA | S 39 | An Act protecting sensitive personal information from breaches and other cybersecurity incidents Companion: MA SD 2333 | In committee | 12 May 2025 |
| MA | S 42 † | An Act protecting against cyber ransom Companion: MA SD 2020 | In committee | 9 October 2025 |
| MA | S 49 | An Act relative to cybersecurity and artificial intelligence Companion: MA SD 873 | Passed committee | 12 May 2025 |
| MD | HB 1079 | Public Service Commission - Study on the Electric Transmission and Distribution System | In committee | 3 March 2025 |
| MD | HB 1239 | Public Safety - Critical Infrastructure Protection Companion: MD SB 825 | Enacted | 12 May 2026 |
| MD | HB 1309 | Cybersecurity – Standards, Compliance, and Audits – Alterations Companion: MD SB 907 | In committee | 8 March 2025 |
| MD | HB 1321 | Income Tax - Credit for Cybersecurity Measures Undertaken by Small Businesses | In committee | 7 February 2025 |
| MD | HB 1335 | Department of Information Technology - Information Technology Staffing and Capability Assessment - Independent Study | Enacted | 31 May 2026 |
| MD | HB 1468 | Cyber Maryland Program – Revisions | Passed chamber | 7 April 2025 |
| MD | HB 209 | State Finance and Procurement - Local Cybersecurity Preparedness and Response Plan and Assessment - Repeal | Enacted | 22 April 2025 |
| MD | HB 235 | State Government - Information Technology - Cybersecurity Revisions | Enacted | 22 April 2025 |
| MD | HB 333 | Healthcare Ecosystem Stakeholder Cybersecurity Workgroup | Vetoed | 16 May 2025 |
| MD | HB 376 | Maryland Cybersecurity Council - Alterations | Enacted | 20 May 2025 |
| MD | HB 444 | Criminal Law – Interference With Critical Infrastructure or a Public Safety Answering Point – Penalties | In committee | 17 January 2025 |
| MD | HB 445 | Criminal Law - Interference With a Public Safety Answering Point - Penalties Companion: MD SB 81 | Enacted | 22 April 2025 |
| MD | HB 593 | Criminal Law - Interference With Critical Infrastructure or a Public Safety Answering Point | Enacted | 12 May 2026 |
| MD | HB 82 | Cyber Maryland Program - Revisions Companion: MD SB 241 | In committee | 8 January 2025 |
| MD | HB 861 | Department of Information Technology - Statewide Information Technology Master Plan - Reporting | Enacted | 12 May 2026 |
| MD | HB 957 | Cybersecurity - Standards and Compliance - Alterations Companion: MD SB 601 | Enacted | 14 April 2026 |
| MD | SB 183 | Public Safety - Maryland Cyber Reserve - Established | In committee | 3 February 2026 |
| MD | SB 239 | State Finance and Procurement - Local Cybersecurity Preparedness and Response Plan and Assessment - Repeal | Enacted | 22 April 2025 |
| MD | SB 244 | State Government - Information Technology - Cybersecurity Revisions | Enacted | 22 April 2025 |
| MD | SB 25 | Income Tax - Cybersecurity Technology and Service Tax Credit - Alterations Companion: MD HB 290 | Passed chamber | 16 March 2026 |
| MD | SB 294 | Maryland Cybersecurity Council - Alterations | Enacted | 20 May 2025 |
| MD | SB 482 | Criminal Law - Interference With Critical Infrastructure or a Public Safety Answering Point | Enacted | 12 May 2026 |
| MD | SB 581 | Department of Information Technology - Statewide Information Technology Master Plan - Reporting | Enacted | 12 May 2026 |
| MD | SB 691 | Healthcare Ecosystem Stakeholder Cybersecurity Workgroup | Vetoed | 16 May 2025 |
| MD | SB 727 | Municipal Elections - Qualified Electronic Transmission Systems - Authorization for Use | In committee | 10 February 2026 |
| MD | SB 867 | Cyber Maryland Program - Revisions | Enacted | 22 April 2025 |
| MD | SB 871 | Department of the Environment - Community Water and Sewerage Systems - Cybersecurity Planning and Assessments Companion: MD HB 1062 | Enacted | 13 May 2025 |
| ME | LD 2092 | An Act To Update Certain Terms And References Regarding Information Technology And Cybersecurity | Enacted | 15 April 2026 |
| ME | LD 2103 | An Act Requiring Hospitals To Adopt Cybersecurity Plans | Enacted | 13 April 2026 |
| ME | LD 224 | An Act To Expand The Definition Of "Terrorism" In The Laws Governing The Maine Emergency Management Agency | Enacted | 16 May 2025 |
| MI | HB 5247 | Civil rights: public records; limited access to public records; provide for incarcerated individuals. Amends secs. 1, 2, 3 & 5 of 1976 PA 442 (MCL 15.231 et seq.). | In committee | 13 November 2025 |
| MI | HB 5330 † | Aeronautics: unmanned aircraft systems; cybersecurity and data protection requirements for drones; provide for. Amends 2016 PA 436 (MCL 259.301 - 259.331) by adding sec. 16. | Passed committee | 12 May 2026 |
| MI | HB 5847 | Public utilities: electric utilities; cyber-physical security and operational technology protections for electric utility facilities and natural gas utilities; provide for. Amends 1939 PA 3 (MCL 460.1 - 460.11) by adding 10ii. | In committee | 23 April 2026 |
| MI | HB 5848 | Energy: other; cyber-physical security and operational technology protections for battery energy storage systems; provide for. Amends 2008 PA 295 (MCL 460.1001 - 460.1232) by adding sec. 112. | In committee | 23 April 2026 |
| MI | HB 5849 | Businesses: other; cyber-physical security and operational technology protections for data centers; provide for. Creates new act. | In committee | 23 April 2026 |
| MI | HB 5850 | Water supply: systems; cyber-physical security and operational technology protections for public water systems; provide for. Amends sec. 21 of 1976 PA 399 (MCL 325.1021) & adds sec. 8a. | In committee | 23 April 2026 |
| MI | HB 6011 | Businesses: other; cybersecurity requirements for large-scale solar energy facilities; provide for. Amends 2008 PA 295 (MCL 460.1001 - 460.1232) by adding sec. 112a. | In committee | 2 June 2026 |
| MI | SB 360 | Consumer protection: identity theft; identity theft protection act; modify. Amends ses. 3, 12 & 12b of 2004 PA 452 (MCL 445.63 et seq.); adds secs. 11a, 11b, 20, 20a, 20b & 20c & repeals secs. 15 & 17 of 2004 PA 452 (MCL 445.75 & 445.77). | Passed chamber | 26 August 2025 |
| MI | SB 549 | Insurance: other; data security enforcement; modify. Amends secs. 553, 561 & 563 of 1956 PA 218 (MCL 500.553 et seq.) & adds secs. 564 & 564a. | Passed committee | 11 February 2026 |
| MI | SB 745 | Consumer protection: identity theft; citations to the motor vehicle sales finance act in the identity theft protection act; revise. Amends sec. 3 of 2004 PA 452 (MCL 445.63). TIE BAR WITH: SB 0739'25 | Passed committee | 10 June 2026 |
| MN | HF 140 † | State-funded county and city cybersecurity grant program established, report required, and money appropriated. | In committee | 17 February 2025 |
| MN | HF 2610 † | Cybersecurity permitted to be offered as an applied doctoral degree. | In committee | 20 March 2025 |
| MN | HF 2630 † | Crime of unauthorized computer access expanded to include accessing a computer without penetrating security system. | In committee | 24 March 2025 |
| MN | HF 3013 † | Milestone Community Development funding provided for a cybersecurity training program, and money appropriated. | In committee | 1 April 2025 |
| MN | HF 3860 † | Cybersecurity legislative commission extended. Companion: MN SF 3863 | Passed chamber | 11 May 2026 |
| MN | SF 2069 † | Metropolitan State University cyber range services funding authorization and appropriation | In committee | 3 March 2025 |
| MN | SF 2753 † | Cybersecurity offering as an applied doctoral degree authorization provision | In committee | 1 April 2025 |
| MN | SF 3292 | Milestone Community Development cybersecurity training program appropriation | In committee | 7 April 2025 |
| MN | SF 379 † | State-funded county and city cybersecurity grant program establishment | In committee | 20 March 2025 |
| MN | SF 703 † | Crime of unauthorized computer access expansion to include accessing a computer without penetrating a security system | In committee | 27 January 2025 |
| MO | HB 1231 | Creates new provisions related to infrastructure security | In committee | 2 April 2025 |
| MO | HB 210 | Establishes the "Unmanned Aerial Systems Security Act of 2025" | In committee | 3 March 2025 |
| MO | HB 436 | Establishes cybersecurity and informational security standards to safeguard insurance company customer information | Passed committee | 6 May 2025 |
| MO | SB 1003 | SS/SCS/SB 1003 - This act modifies provisions relating to military affairs. GRANTS FROM THE MISSOURI MILITARY FAMILY RELIEF FUND (SECTION 41.216) This act modifies the composition of the panel that recommends to the Adjutant General to make grants or provide other financial assistance or services from the Missouri Military Family Relief Fund. Instead of a sergeant major of the Missouri National Guard, the panel shall include a senior enlisted leader of the Missouri National Guard. This act also provides that the Adjutant General, rather than the panel, shall have the power to establish criteria for the grants. Furthermore, the grants may be made to members of the Missouri National Guard in addition to families of members and other reserve members of the Armed Forces of the United States. This provision is identical to a provision in the perfected SS/SCS/SB 974 (2026) and in the truly agreed to and finally passed SS/SCS/HB 2593 (2026). MISSOURI NATIONAL GUARD RIBBONS (SECTIONS 41.475, 41.598 & 41.599) This act establishes a Missouri National Guard Counterdrug Program Ribbon, which the Adjutant General is authorized to present to any member of the Missouri National Guard who has participated in the Counterdrug Program after January 1, 1989. This act also establishes the Missouri National Guard Homeland Response Force Program Ribbon, which the Adjutant General is authorized to present to any member of the Missouri National Guard who has participated in the Homeland Response Force Program after January 1, 2012. This act establishes a Missouri National Guard Engineer Explosive Ordnance Clearance Agent Ribbon, which the Adjutant General is authorized to present to any member of the Missouri National Guard who has participated in an engineer explosive ordnance clearance agent course after January 1, 2012. These provisions are identical to provisions in the perfected SS/SCS/SB 974 (2026) and in the truly agreed to and finally passed SS/SCS/HB 2593 (2026). FEDERAL ASSET FORFEITURE PROGRAM PARTICIPATION BY THE NATIONAL GUARD (SECTION 41.477) This act creates the Missouri National Guard Counterdrug Revolving Fund, which shall consist of all monies received by the Missouri National Guard through federal asset forfeiture programs for purposes authorized by such programs. Participation in federal asset forfeiture programs shall be at the discretion of the Adjutant General. Upon electing to participate, the Missouri National Guard shall comply with the terms of an equitable sharing agreement and certificate of the federal asset forfeiture program. This provision is identical to a provision in SS/SCS/SB 974 (2026) and in the truly agreed to and finally passed SS/SCS/HB 2593 (2026). CYBERSECURITY MISSION ACT (SECTIONS 41.1015 TO 41.1018) This act establishes the Cybersecurity Mission Act, which provides that upon the request of the Director of the Department of Public Safety, the Missouri National Guard may enter into agreements for aid related to cybersecurity, cyber-attack prevention, cyber-attack response, and cyber-attack support activities for this state and for political subdivisions, governing bodies, public colleges and universities, law enforcement agencies, utility companies, and critical infrastructure facilities of this state. The Adjutant General may activate members on state order to carry out such activities. The Missouri National Guard Cyber-Security Revolving Fund is created and shall consist of monies appropriated by the General Assembly and monies received as a charge and monies received as reimbursement for expenses incurred by the Missouri National Guard related to rendering aid under this act. These provisions are identical to provisions in SS/SCS/SB 974 (2026) and in the truly agreed to and finally passed SS/SCS/HB 2593 (2026). RECOGNITION MEDALS (SECTIONS 42.300 TO 42.316) The Missouri Veterans' Commission may use the Veterans Commission Capital Improvement Trust Fund for payment of expenses associated with providing medals, medallions, and certificates in recognition of service in the Armed Forces of the United States for any conflict, war, operation, and similar incident identified in law, rather than during World War II, the Korean Conflict, and the Vietnam War. Furthermore, this act provides that spouses or eldest living survivors of a deceased veteran, who was entitled to but died prior to applying, may apply for, on behalf of the deceased veteran, the following medallions, medals, and certificates: • Operation Iraqi Freedom and Operation New Dawn; • Operation Enduring Freedom, Operation Freedom's Sentinel, and Operation Allies Refuge Program; and • Operation Desert Shield and Operation Desert Storm. The Missouri Veterans' Commission shall design the form for such medallions, medals, and certificates. The Adjutant General shall determine as expeditiously as possible those persons who are entitled to such medallions, medals, and certificates and shall notify the General Assembly when such supply totals less than 100. These provisions are identical to provisions in the perfected SS/SCS/SB 974 (2026) and in the truly agreed to and finally passed SS/SCS/HB 2593 (2026). STATE-SPONSORED LIFE INSURANCE PROGRAM (SECTION 105.265) This act provides that the Adjutant General shall be the official sponsor of the state-sponsored life insurance program, which is the life insurance program exclusively offered to all members of the Missouri National Guard through the Missouri National Guard Association in accordance with federal law. The Missouri National Guard Association shall select the insurer used to provide the program. Furthermore, the Adjutant General shall: (1) Allow, facilitate, and coordinate all efforts to make the program available to all Missouri National Guard members; (2) Provide an opportunity for Missouri National Guard members to purchase products of the program; (3) Allow, facilitate, and coordinate requested allotments with the appropriate United States Property and Fiscal Office; (4) Allow program representatives to provide Missouri National Guard members with program briefings during annual training and inactive duty training periods; and (5) Allow Missouri National Guard members to designate or change beneficiaries under the program. This provision is identical to a provision in the perfected SS/SCS/SB 974 (2026) and in the truly agreed to and finally passed SS/SCS/HB 2593 (2026). LEAVE FROM EMPLOYMENT FOR MILITARY SERVICE (SECTION 105.270) This act expands, from 120 to 160, the maximum number of hours in leave of absence per federal fiscal year that certain public employees are entitled to take to perform specified military duties without loss of time, pay, regular leave, impairment of efficiency rating, or of any other rights or benefits to which the employees are otherwise entitled. This provision is identical to a provision in the perfected SS/SCS/SB 974 (2026) and in the truly agreed to and finally passed SS/SCS/HB 2593 (2026). TUITION AND FEE WAIVERS FOR MISSOURI NATIONAL GUARD MEMBERS (SECTION 173.239) Currently, the tuition and fee waiver for undergraduate courses at Missouri higher education institutions to Missouri National Guard members apply after GI Bill educational entitlements. This act repeals this provision. This provision is similar to a provision in the truly agreed to and finally passed SS/SCS/HB 2593 (2026). REPEAL OF THE MILITARY COUNSEL (SECTION 41.220) Finally, this act repeals the Military Council, which duties included acting in an advisory capacity on matters provided by the Governor and the Adjutant General and making recommendations of appropriations for the needs of the militia and expending such appropriations. This provision is identical to a provision in the perfected SS/SCS/SB 974 (2026) and in the truly agreed to and finally passed SS/SCS/HB 2593 (2026). KATIE O'BRIEN | Passed committee | 15 May 2026 |
| MO | SB 113 | Creates a one-time grant for employers to enhance cybersecurity | In committee | 23 January 2025 |
| MO | SB 1281 | SB 1281 - This act repeals the sunset date of the Cyber Crime Investigation Fund and the grant program created under the Fund. This act is identical to CCS/HCS/SS/SCS/SB 60 (2025) and is similar to a provision in SB 893 (2026), HB 1946 (2026), SS/SCS/HCS/HBs 2273, 1946, 1814 & 2551 (2026), HCS/SS#2/SCS/SB 10 (2025), SCS/HCS/HB 87 (2025), SCS/HCS/HB 615 (2025), SCS/HCS/HB 1259 (2025), and SS/HCS/HB 1464 (2025). TRISTAN BENSON, JR. | In committee | 27 January 2026 |
| MO | SB 1747 | SB 1747 - CYBERCRIME VICTIM PROTECTIONS (SECTION 285.625, 285.630, 285.635, 285.650, 285.670, 455.030, 595.205,595.400, & 595.450) Currently, victims of domestic or sexual violence are afforded workplace protections such as unpaid leave, continuance of medical coverage during unpaid leave, and certain reasonable safety accommodations. This act extends those same protections to victims of cyberharassment, cyberstalking, harassment, and stalking. Further this act protects employees who report certain behaviors from retaliation by their employer. This act establishes the Cybercrimes Survivors' Bill of Rights. These provisions require that an appropriate medical provider, law enforcement officer, and prosecuting attorney shall provide the cybercrimes survivor with notification of the rights of survivors. The Department of Public Safety with the Attorney General shall develop forms and procedures for gathering, transmitting, and storing evidence related to cyberharassment, cyberstalking, harassment, and stalking offenses. The Department of Public Safety shall develop a document in collaboration with Missouri-based stakeholders and shall provide this document in clear language that is comprehensible to a person proficient in English and shall provide this document in any other foreign language spoken by at least five percent of the population in any county or city not within a county in Missouri. The Elder Abuse Task Force is established within this act. This fourteen member task force shall appoint a chairperson who is elected by a majority vote of the members of the task force. Under this act, the task force shall examine and make recommendations on romance scams, educational resources deemed necessary by the task force to educate and inform victims and the public on ways to protect themselves, measures necessary to address and reduce elder abuse, and measures to help victims and victims' families prevent and heal from elder abuse. Under this act, the Missouri Supreme Court shall develop guidelines for the redaction of personal identifying information in court documents. NO-CALL LIST (SECTION 407.1095, 407.1098, 407.1101, & 407.1104) This act adds definitions for "business subscriber", "call spoofing", "seller" and "telemarketer" to this chapter. Under current law a natural person responding to a referral, or person setting or attempting to set an appointment for actions related to their licensed trade is an exception to the "telephone solicitation" definition for the purposes of the state no-call list. This act removes that exception. Under this act business subscribers are eligible to be placed on the state's no-call list. Currently the Attorney General can determine the length of time that an individual remains on the no-call list before having to send another notice. This act allows a person to remain on the no-call list indefinitely. These provisions are similar to HB 2147 (2026), HB 2472 (2026), and HB 2546 (2026). CALLER ID ANTI-SPOOFING (SECTION 407.1115) The act establishes the "Caller ID Anti-Spoofing Act", which requires with these requirements if the provider has filed a certification with the Federal Communications Commission that the provider's traffic meets certain requirements detailed in the act. No later than August 28, 2027, providers must implement a Secure Telephone Identity Revisited (STIR) and Signature-based Handling of Asserted Information Using toKENs (SHAKEN) authentication protocol or an alternative technology that provides comparable or superior capability to verify and authenticate certain caller identification information. Any provider that knowingly fails or neglects to comply with these requirements is subject to fines of $25,000 for the first offense, $50,000 for the second offense, and $75,000 for the third and any subsequent offense. It is a violation of these provisions if a caller enters false information or places a call knowing false information was entered into a caller identification service with the intent to deceive, defraud, or mislead the recipient of the call. Certain calls are exempt from these requirements as specified in the act. The recipient of any call in which the caller uses false caller identification information will have standing to recover punitive damages against the caller in an amount up to $5,000 per call. Call recipients can bring action under this provision as members of a class. The Attorney General can initiate legal proceedings or intervene in legal proceedings on behalf of call recipients. This provision is identical to HB 2147 (2026), and HB 2472 (2026). FIREARM RESTRICTIONS (SECTION 455.050, 455.523, 565.076, 565.227, & 571.070) This act provides that after a hearing for any full order of protection in which an order of protection is granted, the court may also prohibit the respondent from knowingly possessing or purchasing any firearm while the order is in effect, and inform the respondent either in writing or orally of such prohibition. If the respondent is prohibited from possessing or purchasing firearms, the court shall forward the order to the State Highway Patrol for enforcement. This act provides that upon conviction for the offenses of domestic assault in the fourth degree and stalking in the second degree, the court shall forward the record of conviction to the State Highway Patrol. The State Highway Patrol shall update the respondent's record in the National Instant Criminal Background Check System and also notify the Federal Bureau of Investigation within 24 hours. This act provides that a person commits the offense of unlawful possession of a firearm if the person knowingly possesses a firearm and has been convicted of a domestic violence offense in Missouri or any other state or is subject to an order of protection prohibiting the possession or purchase of a firearm that was issued after a hearing in which the person had actual notice and had the opportunity to participate in such hearing. These provisions are identical to provisions in SB 328 (2025), similar to provisions in SB 91 (2025) and HB 904 (2025), identical to provisions in SB 913 (2024), SB 431 (2023), SB 59 (2023), and SB 305 (2023), and similar to provisions in HB 3048 (2026), HB 3286 (2026), SB 894 (2022), HB 1655 (2022), SB 144 (2021), and HB 2131 (2020). OFFENSES (SECTION 27.117, 565.076, 565.090, 565.091, 565.227, 565.260, 565.400, 565.405, 573.570, & 573.575) This act allows the Attorney General to prosecute certain offenses that occurred in more than one jurisdiction. Currently, the offense of domestic assault in the fourth degree is a class A misdemeanor, unless it is a second or subsequent offense in which case it will be a class E felony. This act makes the offense a class E felony for a first offense and a class D felony for a second or subsequent offense. Under current law a first offense of harassment in the first degree is a class E felony. This act provides that a second or subsequent conviction of harassment in the first degree shall be a class D felony where the individual has previously been found guilty of harassment in the first or second degree. In current statute a first offense of harassment in the second degree is a class A misdemeanor. Under this act a second or subsequent conviction of harassment in the second degree are modified to include a conviction of harassment in the first degree as a previous conviction and it is a class E felony. Currently, the offense of stalking in the second degree is a class A misdemeanor, unless it is a second or subsequent offense in which case it shall be a class E felony. This act provides that the first offense shall be a class E felony, and a second or subsequent offense shall be a class D felony. This act creates the offense of unlawful tracking of a motor vehicle. A person is guilty of this offense if he or she knowingly installs, conceals, or otherwise places an electronic tracking device in or on a motor vehicle. This offense shall be a class A misdemeanor for a first offense and a class E felony for a second or subsequent offense. This act creates the offense of cyberharassment. A person commits this offense if he or she purposely or knowingly engages in a threatening, aggressive, or otherwise fear-inducing, course of conduct by using digital technology, internet service providers, electronic service providers or other electronic communications and devices cause reasonable fear, alarm, anxiety, undo stress, or terror to others by repeated contact with no legitimate purpose. This act shall be a class B misdemeanor upon a first offense and a class A misdemeanor for second or subsequent offenses. A person commits the offense of cyberstalking if such person purposely or knowingly engages in a threatening, aggressive, or otherwise fear-inducing, course of conduct by using digital technology, internet service providers, electronic service providers or other electronic communications and devices to enhance the ability to intimidate, track, follow or cause reasonable fear, alarm, anxiety, undo stress, or terror to another person. A first offense shall be a class A misdemeanor and a second or subsequent offense shall be a class E felony. This act creates the offense of disclosure of an intimate digital depiction. A person shall be guilty of such offense if he or she discloses or threatens to disclose an intimate digital depiction with the intent to harass or threaten another person. A violation of such offense is a class D felony if the person discloses an intimate digital depiction and a class E felony if the person threatens to disclose an intimate digital depiction. Any second or subsequent violation of disclosure of an intimate digital depiction is a class C felony. It shall be a class D felony for a second or subsequent conviction of threatening to disclose an intimate digital depiction. Additionally, it shall be a class C felony if the disclosure interferes with a government proceeding or causes violence. This act creates the offense of sadistic online exploitation. A person commits this offense where he or she uses the internet to coerce a victim into committing certain acts. This offense shall be a class E felony, except if bodily harm or injury occurs, in which case it shall be a class D felony. ADDRESS CONFIDENTIALITY PROGRAM (SECTION 589.660 & 589.663) The list of individuals protected by the address confidentiality program is amending by adding victims of cyberstalking, harassment and cyberharassment. PEACE OFFICER TRAINING (SECTION 590.040) Under this act, every peace officer licensed after August 28, 2027, must receive as part of their basic training four hours of training specific to cyberstalking, harassment and cyberharassment. The training shall also include the legal rights and remedies available to victims, including the civil and criminal remedies, and resources and services available to victims. TRISTAN BENSON, JR. | In committee | 7 May 2026 |
| MO | SB 385 | Enacts provisions relating to insurance companies' data security | Passed committee | 11 March 2025 |
| MO | SB 890 | SS/SCS/SB 890 - This act requires each state department with oversight of an administrative entity to submit an annual report to the General Assembly detailing any administrative entity that has not convened a public meeting or conducted public business during the three year period ending on August 28th of such year. The act further repeals and reassigns duties for a number of administrative entities. The Division of Workforce Development within the Department of Economic Development is renamed and moved to the Office of Workforce Development within the Department of Higher Education and Workforce Development. The Board for Certification of Interpreters is repealed and its duties assigned to the Missouri Commission for the Deaf and Hard of Hearing. The Life Sciences Research Board is repealed and its duties assigned the Department of Economic Development. The act repeals the Missouri Quality Home Care Council is repealed as well as all duties of the Council. The act repeals the following entities: the Career Readiness Course Task Force; the Infection Control Advisory Panel; the Missouri Arthritis Advisory Board and the Arthritis Program Review Committee; the AgriMissouri Advisory Commission for Marketing Missouri Agricultural Products; the Coordinating Board for Early Childhood; the Minority Environmental Literacy Advisory Committee; the Missouri Cybersecurity Commission; the Small Business Compliance Advisory Committee; and the Commission on the Special Health, Psychological and Social Needs of Minority Older Individuals. This act is similar to SB 729 (2025). JIM ERTLE | Enacted | 13 July 2026 |
| MO | SB 928 | SCS/SB 928 - This act modifies provisions relating to criminal offenses. ATTORNEY GENERAL (SECTION 27.117) This act gives the Attorney General concurrent jurisdiction to prosecute certain offenses that occurred in more than one jurisdiction. PROTECTIVE ORDERS (SECTION 455.050) Under current law, a person that petitions for a full or ex parte protective order is protected from certain offenses if the order is granted. This act adds cyberstalking to the list of offenses. RELEASE FROM JAIL (SECTION 544.667) Currently, a person can be released from jail upon recognizance or bond. This act provides that a person that has been released under such circumstances that fails to comply with the conditions of such release that imposes no contact with the victim shall be guilty of a class A misdemeanor and shall forfeit any security that was pledged for their release. CRIMINAL OFFENSES (SECTIONS 565.002, 565.050, 565.052, 565.054, 565.056, 565.072, 565.073, 565.074, 565.090, 565.091, 565.225, 565.227, 565.260, 565.400, 565.405, 573.570, & 573.575) This act modifies the offenses of assault in the first, second, third, and fourth degrees and the offenses of domestic violence in the first, second, third, and fourth degrees by removing the defined terms of "serious physical injury" and "physical injury" and providing for the following harms: • Great bodily harm: Bodily injury which creates a high probability of death, or which causes serious permanent or protracted loss or impairment of function of any bodily member or organ, or other serious bodily harm; • Substantial bodily harm: Bodily harm which involves a temporary but substantial disfigurement, or which causes temporary but substantial loss or impairment of the function of any bodily member or organ, or which causes a fracture of any bodily member; and • Bodily harm: Physical pain or injury, illness, or any impairment of physical condition. Under current law, the first offense of harassment in the first degree is a class E felony. This act provides that a second or subsequent conviction of harassment in the first degree shall be a class D felony where the individual has previously been found guilty of harassment in the first or second degree. Currently, a first offense of harassment in the second degree is a class A misdemeanor. Under this act, provisions relating to a second or subsequent conviction of harassment in the second degree are modified to include a conviction of harassment in the first degree as a previous conviction in which case it is a class E felony. This act modifies the offense of stalking in the first degree by repealing the elements of such offense and providing that a person commits the offense of stalking in the first degree when the person knowingly, through a course of conduct that is directed at another person or through technological abuse, as defined in the act, engages in conduct that would cause a reasonable person under similar circumstances to: • Fear death or bodily injury, as defined in this act; • Fear that an offense will be committed against a member of the person's family, household members, or an individual with whom the person has a dating relationship; • Fear that an offense will be committed against the person's property; or • Feel harassed, terrified, or intimidated. This act modifies the offense of stalking in the second degree by repealing the elements of such offense and providing that a person commits the offense of stalking in the second degree when the person knowingly, through a course of conduct that is directed at another person or through technological abuse, as defined in the act, engages in conduct that would cause a reasonable person under similar circumstances to feel harassed, terrified, or intimidated. This act creates the offense of unlawful tracking of a motor vehicle. A person is guilty of this offense if he or she knowingly installs, conceals, or otherwise places an electronic tracking device in or on a motor vehicle. This offense shall be a class A misdemeanor for a first offense and a class E felony for a second or subsequent offense. This act creates the offense of cyberharassment. A person commits this offense if he or she purposely or knowingly engages in a threatening, aggressive, or otherwise fear-inducing, course of conduct by using digital technology, internet service providers, electronic service providers or other electronic communications and devices cause reasonable fear, alarm, anxiety, undo stress, or terror to others by repeated contact with no legitimate purpose. This offense shall be a class B misdemeanor upon a first offense and a class A misdemeanor for second or subsequent offenses. A person commits the offense of cyberstalking if such person purposely or knowingly engages in a threatening, aggressive, or otherwise fear-inducing, course of conduct by using digital technology, internet service providers, electronic service providers or other electronic communications and devices to enhance the ability to intimidate, track, follow or cause reasonable fear, alarm, anxiety, undo stress, or terror to another person. A first offense shall be a class A misdemeanor and a second or subsequent offense shall be a class E felony. This act creates the offense of disclosure of an intimate digital depiction. A person shall be guilty of such offense if he or she discloses or threatens to disclose an intimate digital depiction with the intent to harass or threaten another person. A violation of such offense is a class D felony if the person discloses an intimate digital depiction and a class E felony if the person threatens to disclose an intimate digital depiction. Any second or subsequent violation of such offense is a class C felony. Additionally, it shall be a class C felony if the disclosure interferes with a government proceeding or causes violence. This act creates the offense of sadistic online exploitation. A person commits this offense where he or she uses the internet to coerce a victim into committing certain acts. This offense shall be a class E felony. This act is substantially similar to HB 3426 (2026). TRISTAN BENSON, JR. | Passed committee | 4 March 2026 |
| MO | SB 974 | SS/SCS/SB 974 - This act modifies provisions relating to military affairs. GRANTS FROM THE MISSOURI MILITARY FAMILY RELIEF FUND (SECTION 41.216) This act modifies the composition of the panel that recommends to the Adjutant General to make grants or provide other financial assistance or services from the Missouri Military Family Relief Fund. Instead of a sergeant major of the Missouri National Guard, the panel shall include a senior enlisted leader of the Missouri National Guard. This act also provides that the Adjutant General, rather than the panel, shall have the power to establish criteria for the grants. Furthermore, the grants may be made to members of the Missouri National Guard in addition to families of members and other reserve members of the Armed Forces of the United States. This provision is identical to a provision in SS/SCS/SB 1003 (2026) and in the truly agreed to and finally passed SS/SCS/HB 2593 (2026). SUPPORTING MISSOURI SERVICEMEN AND WOMEN ACT - INSURANCE COVERAGE FOR CERTAIN MEMBERS OF THE NATIONAL GUARD (SECTION 41.430) This act establishes the Supporting Missouri Servicemen and Women Act. Currently, members of the Missouri National Guard serving under state active duty orders receive the same pay, longevity, and allowances as members of like grade and branch of the Armed Forces of the United States, provided that such members at least receive the daily paygrade rate of an E5 with maximum longevity and dependents. This act additionally provides that members of the Missouri National Guard who are on state active duty orders for more than 30 days shall receive an allowance for any premiums for TRICARE or other government-sponsored insurance programs for coverage of the member during the period of active duty. This provision is identical to SCS/SB 925 (2026) and a provision in the truly agreed to and finally passed SS/SCS/HB 2593 (2026). MISSOURI NATIONAL GUARD RIBBONS (SECTIONS 41.475, 41.598 & 41.599) This act establishes a Missouri National Guard Counterdrug Program Ribbon, which the Adjutant General is authorized to present to any member of the Missouri National Guard who has participated in the Counterdrug Program after January 1, 1989. This act also establishes the Missouri National Guard Homeland Response Force Program Ribbon, which the Adjutant General is authorized to present to any member of the Missouri National Guard who has participated in the Homeland Response Force Program after January 1, 2012. This act establishes a Missouri National Guard Engineer Explosive Ordnance Clearance Agent Ribbon, which the Adjutant General is authorized to present to any member of the Missouri National Guard who has participated in an engineer explosive ordnance clearance agent course after January 1, 2012. These provisions are identical to provisions in SS/SCS/SB 1003 (2026) and in the truly agreed to and finally passed SS/SCS/HB 2593 (2026). FEDERAL ASSET FORFEITURE PROGRAM PARTICIPATION BY THE NATIONAL GUARD (SECTION 41.477) This act creates the Missouri National Guard Counterdrug Revolving Fund, which shall consist of all monies received by the Missouri National Guard through federal asset forfeiture programs for purposes authorized by such programs. Participation in federal asset forfeiture programs shall be at the discretion of the Adjutant General. Upon electing to participate, the Missouri National Guard shall comply with the terms of an equitable sharing agreement and certificate of the federal asset forfeiture program. This provision is identical to a provision in SS/SCS/SB 1003 (2026) and in the truly agreed to and finally passed SS/SCS/HB 2593 (2026). CYBERSECURITY MISSION ACT (SECTIONS 41.1015 TO 41.1018) This act establishes the Cybersecurity Mission Act, which provides that upon the request of the Director of the Department of Public Safety, the Missouri National Guard may enter into agreements for aid related to cybersecurity, cyber-attack prevention, cyber-attack response, and cyber-attack support activities for this state and for political subdivisions, governing bodies, public colleges and universities, law enforcement agencies, utility companies, and critical infrastructure facilities of this state. The Adjutant General may activate members on state order to carry out such activities. The Missouri National Guard Cyber-Security Revolving Fund is created and shall consist of monies appropriated by the General Assembly and monies received as a charge and monies received as reimbursement for expenses incurred by the Missouri National Guard related to rendering aid under this act. These provisions are identical to provisions in SS/SCS/SB 1003 (2026) and in the truly agreed to and finally passed SS/SCS/HB 2593 (2026). MOGIVES - LIVING DONOR MEDICAL ORDERS FOR NATIONAL GUARD MEMBERS (SECTION 41.1030) This act establishes the Missouri Guaranteed Inclusive Voluntary Exceptional Service (MO GIVES) Program under the Department of the National Guard (Department). The MO GIVES Program allows members of the Missouri National Guard who choose to become living organ donors to receive living donor medical orders for purposes of remaining on paid status during the living donation period. The Department shall approve a member's participation if sufficient funds are available and the member: (1) Is under Troop Program Unit status or Individual Ready Reserve status; (2) Is in good standing with the Department; (3) Either is not eligible for living donor paid leave from the member's employer or elects not to use any such employer-based benefit available to the member; (4) Specifies the type of donation; and (5) Agrees to undergo the procurement operation at a health care facility approved as a provider of continuing education points for transplant certification by the American Board for Transplant Certification. Upon approval of a member's application, the Department shall issue a living donor medical order, which shall: (1) Guarantee paid leave for the member for the living donation period, which shall not exceed 45 days unless an extension of time is deemed medically necessary by the primary surgical and medical recovery team; (2) Exempt the member from any requirement to use accrued annual or medical leave for the guaranteed paid living donation period; and (3) Provide a per diem allowance and a basic allowance for housing during the guaranteed paid living donation period based on the member's rank, region, and dependent status. This act also establishes the MO GIVES Fund, which consists of moneys used to fund the benefits provided under the MO GIVES Program. This provision is identical to SB 1539 (2026), SB 1555 (2026), HB 2664 (2026), and HB 2943 (2026), and is similar to a provision in the truly agreed to and finally passed SS/SCS/HB 2593 (2026). COMPENSATION FOR VETERANS BENEFITS MATTERS (SECTION 42.028) This act provides that no person shall receive compensation for referring an individual to another person to advise or assist the individual with any veterans benefits matter, which is described in the act. Additionally, no person shall receive compensation for any services rendered in connection with any claim filed within the one-year presumptive period of active-duty release. A person seeking to receive compensation for advising, assisting, or consulting with any veterans benefits matter shall state the specific terms in a written agreement signed by both parties. Such compensation shall be purely contingent upon an increase in benefits and shall not exceed five times the amount of the monthly increase in benefits. Any initial or non-refundable fees or charges are prohibited by this act. Additionally, persons seeking to receive such compensation shall not utilize a medical professional with whom they have an employment or business relationship for a secondary medical exam. This act further provides that no person shall guarantee a successful outcome or that any individual is certain to receive specific benefits or a specific level, percentage, or amount of benefits. Additionally, no person shall provide such services without including a written and oral disclosure, which is specified in the act. Such disclosure shall be retained for at least one year after the service relationship terminates. Persons engaging in the initial claim preparation shall not utilize international call or data centers for processing veterans' personal information nor gain direct access to any personal medical, financial, or governmental benefits log-in, username, or password information. A violation of this act shall constitute an unlawful practice under the Missouri Merchandising Practices Act. This provision is substantially similar to HB 2758 (2026) and SB 316 (2025) and is similar to SB 1405 (2024) and a provision in HCS/HB 1490 (2024). RECOGNITION MEDALS (SECTIONS 42.300 TO 42.316) The Missouri Veterans' Commission may use the Veterans Commission Capital Improvement Trust Fund for payment of expenses associated with providing medals, medallions, and certificates in recognition of service in the Armed Forces of the United States for any conflict, war, operation, and similar incident identified in law, rather than during World War II, the Korean Conflict, and the Vietnam War. Furthermore, this act provides that spouses or eldest living survivors of a deceased veteran, who was entitled to but died prior to applying, may apply for, on behalf of the deceased veteran, the following medallions, medals, and certificates: • Operation Iraqi Freedom and Operation New Dawn; • Operation Enduring Freedom, Operation Freedom's Sentinel, and Operation Allies Refuge Program; and • Operation Desert Shield and Operation Desert Storm. The Missouri Veterans' Commission shall design the form for such medallions, medals, and certificates. The Adjutant General shall determine as expeditiously as possible those persons who are entitled to such medallions, medals, and certificates and shall notify the General Assembly when such supply totals less than 100. These provisions are identical to provisions in SS/SCS/SB 1003 (2026) and in the truly agreed to and finally passed SS/SCS/HB 2593 (2026). STATE-SPONSORED LIFE INSURANCE PROGRAM (SECTION 105.265) This act provides that the Adjutant General shall be the official sponsor of the state-sponsored life insurance program, which is the life insurance program exclusively offered to all members of the Missouri National Guard through the Missouri National Guard Association in accordance with federal law. The Missouri National Guard Association shall select the insurer used to provide the program. Furthermore, the Adjutant General shall: (1) Allow, facilitate, and coordinate all efforts to make the program available to all Missouri National Guard members; (2) Provide an opportunity for Missouri National Guard members to purchase products of the program; (3) Allow, facilitate, and coordinate requested allotments with the appropriate United States Property and Fiscal Office; (4) Allow program representatives to provide Missouri National Guard members with program briefings during annual training and inactive duty training periods; and (5) Allow Missouri National Guard members to designate or change beneficiaries under the program. This provision is identical to a provision in SS/SCS/SB 1003 (2026) and in the truly agreed to and finally passed SS/SCS/HB 2593 (2026). LEAVE FROM EMPLOYMENT FOR MILITARY SERVICE (SECTION 105.270) This act expands, from 120 to 160, the maximum number of hours in leave of absence per federal fiscal year that certain public employees are entitled to take to perform specified military duties without loss of time, pay, regular leave, impairment of efficiency rating, or of any other rights or benefits to which the employees are otherwise entitled. This provision is identical to a provision in SS/SCS/SB 1003 (2026) and in the truly agreed to and finally passed SS/SCS/HB 2593 (2026). INCOME TAX DEDUCTION FOR VETERAN SURVIVOR BENEFITS (SECTION 143.121) Current law authorizes an income tax deduction for retirement benefits received by a taxpayer as a result of service in the Armed Forces of the United States. This act also allows for the deduction of any survivor benefits derived from such service. This provision is identical to SB 1063 (2026) and a provision in SS/SB 59 (2025). REPEAL OF THE MILITARY COUNSEL (REPEAL OF SECTION 41.220) Finally, this act repeals the Military Council, which duties included acting in an advisory capacity on matters provided by the Governor and the Adjutant General and making recommendations of appropriations for the needs of the militia and expending such appropriations. This provision is identical to a provision in SS/SCS/SB 1003 (2026) and in the truly agreed to and finally passed SS/SCS/HB 2593 (2026). KATIE O'BRIEN | Passed chamber | 7 April 2026 |
| MO | SB 999 | SS#2/SB 999 - This act modifies several provisions relating to vulnerable persons. ASSISTANCE FROM THE ATTORNEY GENERAL (Section 27.117) Under this act, a prosecuting attorney may request assistance from the Attorney General for the prosecution of the certain sexual offenses. This provision is identical to a provision in CCS/SS/SCS/HCS/HBs 2637 & 3155 (2026) and substantially similar to a provision in the truly agreed to and finally passed SS/SCS/HCS/HBs 2273 et al (2026). "BORN-ALIVE ABORTION SURVIVORS PROTECTION ACT (Section 188.035) This act creates the "Born-Alive Abortion Survivors Protection Act". Under this act, a child born alive during or after an abortion or attempted abortion shall have the same rights, privileges, and immunities as any other person, citizen, and resident of Missouri, including any other live-born child. Any licensed, registered, or certified health care provider present in the provider's professional capacity at the time a child is born alive during or after an abortion or attempted abortion shall exercise the same degree of professional skill, care, and diligence to preserve the life, health, and comfort of the child as a reasonably diligent and conscientious provider would render to any other child born alive at the same gestational age. Any person who knowingly performs or attempts to perform an overt act that kills a child born alive shall be guilty of first-degree murder. A person shall have the right to bring a cause of action for wrongful death or improper health care, as described in this act. This provision is similar to HCS/HBs 195 & 1119 (2025), SB 702 (2025), SCS/SB 753 (2022), provisions in SCS/HCS/HB 2012 (2022), HCS/HBs 1593 & 1959 (2022), SB 168 (2021), SB 665 (2020), and SB 388 (2019). PREGNANCY-ASSOCIATED MORTALITY REVIEW BOARD (Section 192.990) This act modifies the "Pregnancy-Associated Mortality Review Board" within the Department of Health and Senior Services. Under this act, board membership shall include at least one member from each congressional district with demographically diverse membership. Board members are increased from no more than 18 members to no more than 22 members. Additionally, the board shall, in its study and review of maternal deaths, consider the level and timing of prenatal and postnatal care, the presence or absence of maternity care deserts, approaches taken in this state and other states to reduce or eliminate racial inequities in maternal deaths, and the adequacy of data collected by the board. Data reported by the board shall be disaggregated by race, ethnicity, language, nationality, age, zip code, and level and timing of prenatal and postnatal care. This provision is identical to a provision in the truly agreed to and finally passed SS/SCS/HCS/HB 2372 (2026) and substantially similar to SCS/SB 871 (2026), SB 39 (2025), SCS/SBs 1357 & 888 (2024), and SCS/SBs 579 & 595 (2023). RELEASE FROM JAIL (Section 544.667) Currently, a person can be released from jail upon recognizance or bond. This act provides that a person that has been released under such circumstances that fails to comply with the conditions of such release that imposes no contact with the victim shall be guilty of a class A misdemeanor and shall forfeit any security that was pledged for their release. This provision is identical to a provision in CCS/SS/SCS/HCS/HBs 2637 & 3155 (2026) and SCS/SB 928 (2026). CRIMINAL OFFENSES (Sections 455.050, 565.002, 565.050-565.056, 565.072-565.074, 565.090-565.091, 565.225-565.227, 565.400-565.405, 573.570, 573.575, and Section C) This act modifies the offenses of assault in the first, second, third, and fourth degrees and the offenses of domestic violence in the first, second, third, and fourth degrees by removing the defined terms of "serious physical injury" and "physical injury" and providing for the following harms: • Great bodily harm: Bodily injury which creates a high probability of death, or which causes serious permanent or protracted loss or impairment of function of any bodily member or organ, or other serious bodily harm; • Substantial bodily harm: Bodily harm which involves a temporary but substantial disfigurement, or which causes temporary but substantial loss or impairment of the function of any bodily member or organ, or which causes a fracture of any bodily member; and • Bodily harm: Physical pain or injury, illness, or any impairment of physical condition. Under current law, the first offense of harassment in the first degree is a class E felony. This act provides that a second or subsequent conviction of harassment in the first degree shall be a class D felony where the individual has previously been found guilty of harassment in the first or second degree. Currently, a first offense of harassment in the second degree is a class A misdemeanor. Under this act, provisions relating to a second or subsequent conviction of harassment in the second degree are modified to include a conviction of harassment in the first degree as a previous conviction in which case it is a class E felony. This act modifies the offense of stalking in the first degree by repealing the elements of such offense and providing that a person commits the offense of stalking in the first degree when the person knowingly, through a course of conduct that is directed at another person or through technological abuse, as defined in the act, engages in conduct that would cause a reasonable person under similar circumstances to: • Fear death or bodily injury, as defined in this act; • Fear that an offense will be committed against a member of the person's family, household members, or an individual with whom the person has a dating relationship; • Fear that an offense will be committed against the person's property; or • Feel harassed, terrified, or intimidated. This act modifies the offense of stalking in the second degree by repealing the elements of such offense and providing that a person commits the offense of stalking in the second degree when the person knowingly, through a course of conduct that is directed at another person or through technological abuse, as defined in the act, engages in conduct that would cause a reasonable person under similar circumstances to feel harassed, terrified, or intimidated. This act creates the offense of cyberharassment. A person commits this offense if he or she purposely or knowingly engages in a threatening, aggressive, or otherwise fear-inducing, course of conduct by using digital technology, internet service providers, electronic service providers or other electronic communications and devices cause reasonable fear, alarm, anxiety, undo stress, or terror to others by repeated contact with no legitimate purpose. This offense shall be a class B misdemeanor upon a first offense and a class A misdemeanor for second or subsequent offenses. A person commits the offense of cyberstalking if such person purposely or knowingly engages in a threatening, aggressive, or otherwise fear-inducing, course of conduct by using digital technology, internet service providers, electronic service providers or other electronic communications and devices to enhance the ability to intimidate, track, follow or cause reasonable fear, alarm, anxiety, undo stress, or terror to another person. A first offense shall be a class A misdemeanor and a second or subsequent offense shall be a class E felony. These provisions are identical to provisions in CCS/SS/SCS/HCS/HBs 2637 & 3155 (2026) and SCS/SB 928 (2026). This act creates the offense of disclosure of an intimate digital depiction. A person shall be guilty of such offense if he or she discloses or threatens to disclose an intimate digital depiction with the intent to harass or threaten another person. A violation of such offense is a class D felony if the person discloses an intimate digital depiction and a class E felony if the person threatens to disclose an intimate digital depiction. Any second or subsequent violation of such offense is a class C felony. Additionally, it shall be a class C felony if the disclosure interferes with a government proceeding or causes violence. This act creates the offense of sadistic online exploitation. A person commits this offense where he or she uses the internet to coerce a victim into committing certain acts. This offense shall be a class E felony. These provisions are identical to provision in the truly agreed to and finally passed SS/SCS/HCS/HBs 2273 et al (2026), CCS/SS/SCS/HCS/HBs 2637 & 3155 (2026), and SCS/SB 928 (2026). Provisions of this act have an effective date of July 1, 2027. This act has a non-severability provision for the act. SARAH HASKINS | Enacted | 13 July 2026 |
| MS | HB 1220 † | Cybersecurity; governmental and certain commercial entities substantially complying with standards not liable for incidents relating to. | Passed chamber | 3 March 2026 |
| MS | HB 1333 | Department of Information Technology Services; require all state agencies to use for computer equipment and services. | In committee | 4 February 2025 |
| MS | HB 1380 | Cybersecurity; governmental and certain commercial entities substantially complying with standards not liable for incidents relating to. | Passed chamber | 31 March 2025 |
| MS | HB 1687 | ITS; require to establish minimum cybersecuirty standards for the Statewide Elections Management System. | In committee | 3 February 2026 |
| MS | HB 1727 | State Security Operations Center; create within ITS to serve as operational arm of statewide cybersecurity. | In committee | 3 February 2026 |
| MS | HB 575 | Department of Information Technology Services; require all state agencies to use for computer equipment and services. | In committee | 3 February 2026 |
| MS | HB 731 | Corporate breach of security; require reports to the Attorney General. Companion: MS SB 2046 | In committee | 4 February 2025 |
| MS | SB 2096 † | MDITS and SOS; require to establish minimum cybersecurity standards for SEMS. | Enacted | 19 March 2026 |
| MS | SB 2128 | Breach of security; report to the Attorney General. | In committee | 3 February 2026 |
| MS | SB 2410 | Cybersecurity; limit liability for governmental and certain commercial entities that substantially comply with standards. | In committee | 3 February 2026 |
| MS | SB 2471 | Cyber breach; limit liability for certain entities. | Passed chamber | 4 March 2025 |
| MS | SB 2508 | Mortgage brokers and lenders; authorize to perform organization activities at a remote location. Companion: MS HB 993 | Enacted | 12 March 2025 |
| MS | SB 2636 | The Department of Cybersecurity; create. | Passed committee | 11 February 2026 |
| MS | SB 2701 | Insurance Fraud Detection Act; establish trust fund to assist Mississippi Insurance Department in cyber fraud. | Passed committee | 11 February 2026 |
| MS | SB 2715 | Money Transmission Modernization Act; revise various provisions of and create new provisions related to. | Passed committee | 12 February 2026 |
| MS | SB 2755 | ITS; create additional powers and responsibilities. | In committee | 3 February 2026 |
| MS | SB 2894 | Cybersecurity insurance; include in Mississippi Insurance Guaranty Association statutes. Companion: MS HB 1169 | Enacted | 12 March 2025 |
| MT | LC 3623 † | Interim study on Montana home and cyber-security insurance | Dead | 23 May 2025 |
| NC | HB 608 | Protect Health and Government Personnel Info. | In committee | 1 April 2025 |
| NC | HB 808 | NC Infrastructure Protection Act. | Passed committee | 24 June 2025 |
| NC | HB 819 | DIT Agency Bill. | Passed chamber | 26 June 2025 |
| NC | SB 1037 | DIGITAL NC Act. | In committee | 4 May 2026 |
| NC | SB 562 | Cybersecurity and Quantum Resilience Study. | In committee | 26 March 2025 |
| NC | SB 667 | Government Modernization. | In committee | 26 March 2025 |
| NC | SB 711 | ROD Removal/Gov. Security Breach Notice Costs. | Passed committee | 30 April 2025 |
| NC | SB 830 | Government Modernization/Funds. | In committee | 28 April 2026 |
| ND | HB 1102 † | A BILL for an Act to provide an appropriation to the attorney general for bureau of criminal investigation cybercrime resources. | Passed committee | 7 February 2025 |
| NE | LB 1054 † | Appropriate funds to the State Department of Education for grants for cybersecurity products and services | Dead | 17 April 2026 |
| NE | LB 241 | Provide immunity from liability for cybersecurity events | Enacted | 17 March 2025 |
| NE | LB 599 | Require the State Board of Education to adopt a policy relating to cybersecurity | Dead | 17 April 2026 |
| NE | LB 937 | Adopt the Prior Learning Act and the K-12 Education Cybersecurity Act and change provisions relating to student transfers, school absences, option enrollment, extracurricular activities, reports, school employment, the improvement grant program, monitoring or providing instruction, deadlines, the Nebraska Teacher Apprenticeship Program, the Nebraska Teacher Recruitment and Retention Act, and the College Pathway Program Act | Enacted | 17 April 2026 |
| NH | HB 1728 † | requiring sufficient cybersecurity protections for critical infrastructure and technology projects. | Dead | 5 March 2026 |
| NH | HB 626 | directing the secretary of state to implement a vulnerability disclosure program for certain election systems. | Enacted | 22 July 2025 |
| NH | SB 589 † | relative to port electrification, microgrid development, and cybersecurity standards for energy and water systems. | Enacted | 24 June 2026 |
| NJ | A 1297 | Requires instruction on cybersecurity in grades nine through 12; requires Office of Secretary of Higher Education to develop cybersecurity model curricula; establishes loan redemption programs for individuals in certain cybersecurity occupations. | In committee | 13 January 2026 |
| NJ | A 1368 | Requires certain State employees to receive training in cybersecurity best practices. | Passed committee | 16 March 2026 |
| NJ | A 1549 | Establishes Gaming Cybersecurity Intelligence and Response Council. | In committee | 13 January 2026 |
| NJ | A 1550 | Requires adoption and implementation of cybersecurity standards by casinos and sportsbooks; establishes safe gaming certification program. | In committee | 13 January 2026 |
| NJ | A 1912 | Requires certain State employees to receive training in cybersecurity best practices. | In committee | 19 September 2024 |
| NJ | A 1928 | Requires State, county, and municipal employees and certain State contractors to complete cybersecurity awareness training. Companion: NJ S 1511 | In committee | 13 January 2026 |
| NJ | A 2024 | Requires each government entity in this State to conduct review of cybersecurity infrastructure and make recommendations. Companion: NJ S 3137 | In committee | 13 January 2026 |
| NJ | A 2199 | Requires businesses in financial, essential infrastructure, and health care industries to report cybersecurity incidents. | In committee | 9 January 2024 |
| NJ | A 2301 | Establishes fourth degree crime of cyber-interference. | In committee | 9 January 2024 |
| NJ | A 2424 | Requires State, county, and municipal employees and certain State contractors to complete cybersecurity awareness training. Companion: NJ S 4742 | In committee | 9 January 2024 |
| NJ | A 2862 | Prohibits any foreign company created under laws of foreign adversary from participating in critical infrastructure. Companion: NJ S 324 | In committee | 13 January 2026 |
| NJ | A 2891 | Authorizes wiretap orders for investigation of luring or enticing a child, identity theft, stalking and cyber-harassment under certain circumstances. | In committee | 9 January 2024 |
| NJ | A 3090 | Establishes fourth degree crime of cyber-interference. | In committee | 13 January 2026 |
| NJ | A 3231 | Requires businesses in financial, essential infrastructure, and health care industries to report cybersecurity incidents. | In committee | 13 January 2026 |
| NJ | A 3283 | Requires businesses in financial, essential infrastructure, and health care industries to develop cybersecurity plans. Companion: NJ S 1262 | In committee | 13 January 2026 |
| NJ | A 3959 | Establishes Office of Cybersecurity Infrastructure. Companion: NJ S 2940 | In committee | 13 January 2026 |
| NJ | A 4093 | Requires certain persons and business entities to maintain comprehensive information security program. | In committee | 19 February 2026 |
| NJ | A 4198 | Requires New Jersey Cybersecurity and Communications Integration Cell to study cybersecurity infastructure and establish cybersecurity guidelines. Companion: NJ S 1225 | In committee | 19 February 2026 |
| NJ | A 578 | Authorizes wiretap orders for investigation of luring or enticing a child, identity theft, stalking and cyber-harassment under certain circumstances. | In committee | 13 January 2026 |
| NJ | A 5821 | Establishes Gaming Cybersecurity Intelligence and Response Council. | In committee | 16 June 2025 |
| NJ | A 5822 | Requires adoption and implementation of cybersecurity standards by casinos and sportsbooks; establishes safe gaming certification program. | In committee | 16 June 2025 |
| NJ | A 711 | Requires public institution of higher education to establish plans concerning cyber security and prevention of cyber attacks. | In committee | 13 January 2026 |
| NJ | S 1176 | Requires certain procedures and training for municipalities, counties, and school districts in response to cybersecurity incidents. | In committee | 13 January 2026 |
| NJ | S 321 | Prohibits government entities from procuring and using technology products and services from companies owned by, controlled by, or domiciled in certain foreign countries. | In committee | 13 January 2026 |
| NJ | S 3222 | Requires instruction on cybersecurity in grades nine through 12; requires Office of Secretary of Higher Education to develop cybersecurity model curricula; establishes loan redemption programs for individuals in certain cybersecurity occupations. Companion: NJ A 2999 | Passed committee | 17 March 2025 |
| NJ | S 3313 | Requires certain procedures and training for municipalities, counties, and school districts in response to cybersecurity incidents.* | In committee | 30 January 2025 |
| NJ | S 3386 | Authorizes use of campaign funds for security expenses of candidate, officeholder, staff, and certain family members.* | Passed chamber | 24 September 2026 |
| NJ | S 3557 | Requires certain State employees to receive training in cybersecurity best practices. | In committee | 19 February 2026 |
| NJ | S 3635 | Establishes "New Jersey Cybersecurity Grant Program"; appropriates $5 million from General Fund. | In committee | 24 February 2026 |
| NJ | S 3835 | Establishes Office of Cybersecurity Infrastructure. | Passed committee | 3 March 2025 |
| NJ | S 3878 | Establishes cybersecurity employment grant program for qualified businesses; appropriates $750,000. | In committee | 12 March 2026 |
| NJ | S 3880 | Requires instruction on cybersecurity in grades nine through 12; requires Office of Secretary of Higher Education to develop cybersecurity model curricula; establishes loan redemption programs for individuals in certain cybersecurity occupations. | In committee | 12 March 2026 |
| NJ | S 3932 | Establishes Private Institution of Higher Education Security Grant Program; appropriates $5 million. | In committee | 12 March 2026 |
| NJ | S 611 | Directs New Jersey Cybersecurity and Communications Integration Cell, Office of Information Technology, and New Jersey Big Data Alliance to develop advanced cyberinfrastructure strategic plan. | In committee | 13 January 2026 |
| NJ | S 728 | Prohibits government entities from procuring and using technology products and services from companies owned by, controlled by, or domiciled in certain foreign countries. | In committee | 9 January 2024 |
| NJ | S 731 | Prohibits any foreign company created under laws of foreign adversary from participating in critical infrastructure. | In committee | 9 January 2024 |
| NJ | SJR 107 | Establishes "New Jersey Cybersecurity Task Force." | In committee | 10 March 2026 |
| NM | SB 254 | CYBERSECURITY ACT & OFFICE CHANGES | Passed chamber | 3 June 2025 |
| NV | AB 1 | Revises provisions relating to governmental administration. (BDR 19-22) | Enacted | 20 November 2025 |
| NV | SB 12 | Revises provisions relating to the Office of the Chief Information Officer within the Office of the Governor. (BDR 19-280) | Enacted | 6 June 2025 |
| NV | SB 44 | Revises provisions relating to financial services. (BDR 54-258) | Enacted | 27 May 2025 |
| NV | SB 467 | Revises provisions relating to cybersecurity. (BDR 19-1149) | Enacted | 11 June 2025 |
| NY | A 11324 | Establishes an election security navigator program within the state board of elections Companion: NY S 8615 | In committee | 11 May 2026 |
| NY | A 1239 † | Requires policies covering losses or damages from cyberattacks to include a requirement that the insured notify a law enforcement agency | In committee | 7 January 2026 |
| NY | A 1374 | Relates to identity theft prevention and mitigation services in the case of a security breach Companion: NY S 2152 | In committee | 7 January 2026 |
| NY | A 426 | Relates to procurement requirements for end point device security Companion: NY S 2671 | Enacted | 14 February 2025 |
| NY | A 4739 | Requires certain state employees to undergo annual cyber security training | In committee | 7 January 2026 |
| NY | A 4746 | Relates to creating a cyber security enhancement fund and restricting the use of taxpayer moneys in paying ransoms Companion: NY S 193 | In committee | 7 January 2026 |
| NY | A 6301 | Enacts the Critical Infrastructure Standards and Procedures Act | In committee | 10 February 2026 |
| NY | A 7716 † | Studies the use of blockchain technology in elections | In committee | 7 January 2026 |
| NY | A 7719 | Establishes a commission to study cyber security in the state Companion: NY S 3344 | In committee | 7 January 2026 |
| NY | A 8813 | Relates to the regulation of business involving virtual currencies | In committee | 7 January 2026 |
| NY | S 1961 | Establishes the "secure our data act" Companion: NY A 5739 | Passed chamber | 25 February 2026 |
| NY | S 3258 † | Requires the department of education to provide annual notifications to school districts to combat cyber crime | In committee | 7 January 2026 |
| NY | S 3259 | Relates to prohibiting the procurement of certain technology and products which pose a state or national security risk Companion: NY A 2237 | Enacted | 19 December 2025 |
| NY | S 3693 | Relates to computer-related crimes Companion: NY A 7836 | Passed chamber | 11 February 2026 |
| NY | S 4427 | Relates to a business tax credit for purchase of data breach insurance | In committee | 7 January 2026 |
| NY | S 7672 | Relates to municipal cybersecurity incidents or ransomware attacks Companion: NY A 6769 | Enacted | 26 June 2025 |
| NY | S 804 | Relates to when and how notification of a data breach is to be provided to the department of financial services Companion: NY A 913 | Enacted | 14 February 2025 |
| NY | S 8169 | Requires all state entities to notify affected individuals in the event of a data breach where information is compromised Companion: NY A 8614 | Passed chamber | 1 June 2026 |
| NY | S 83 | Relates to establishing the crime of larceny by cyber extortion Companion: NY A 6794 | Passed chamber | 10 February 2026 |
| NY | S 9088 | Requires the registration of data brokers and establishing a data deletion mechanism for consumers Companion: NY A 9642 | Passed chamber | 4 June 2026 |
| NY | S 9131 | Relates to data broker regulation | In committee | 5 February 2026 |
| NY | S 955 | Relates to the use of smart access systems and the information that may be gathered from such systems Companion: NY A 156 | Passed chamber | 5 June 2026 |
| OH | HB 283 | Require political subdivisions to adopt a cybersecurity program Companion: OH SB 203 | In committee | 21 May 2025 |
| OH | HB 475 | Regards municipal cybersecurity, private cybersecurity contracts | In committee | 1 October 2025 |
| OK | HB 1799 † | Cybersecurity; Cybersecurity Act of 2025; effective date. Companion: OK HB 1800, OK HB 1801, OK HB 1802 | In committee | 4 February 2025 |
| OK | HB 1799 † | Cybersecurity; Cybersecurity Act of 2025; effective date. Companion: OK HB 1800, OK HB 1801, OK HB 1802 | In committee | 4 February 2025 |
| OK | HB 1983 | Schools; media literacy and cybersecurity to be taught in sixth, seventh, or eighth grades; State Department of Education to adopt curriculum standards; effective date. | Passed committee | 3 March 2026 |
| OK | HB 1983 | Schools; media literacy and cybersecurity to be taught in sixth, seventh, or eighth grades; State Department of Education to adopt curriculum standards; effective date. | Passed committee | 10 February 2025 |
| OK | HB 4132 | Technology; liability protections; counties; municipalities; cybersecurity frameworks; State Auditor and Inspector; effective date. | Passed chamber | 1 April 2026 |
| OK | HB 4190 | Oklahoma State Bureau of Investigation; Cyber Crime and Fraud Unit; motor vehicle insurance policy renewals; revolving fund; effective date. | Passed committee | 23 February 2026 |
| OK | SB 1716 | Security Breach Notification Act; prohibiting class action liability for private entity for cybersecurity event; providing exceptions. Effective date. | Passed chamber | 6 April 2026 |
| OK | SB 179 | Information technology; directing state agencies to manage information technology services. Effective date. Emergency. | Passed committee | 17 February 2025 |
| OK | SB 1859 † | Oklahoma State Bureau of Investigation; creating the Cyber Crime Fraud Unit; revolving fund. Effective date. Emergency. | Enacted | 29 May 2026 |
| OK | SB 626 † | Security Breach Notification Act; requiring notice of security breach of certain information; modifying provisions. Effective date. | Enacted | 28 May 2025 |
| OK | SB 626 † | Security Breach Notification Act; requiring notice of security breach of certain information; modifying provisions. Effective date. | Sent to governor | 28 May 2025 |
| OR | HB 3228 | Relating to cybersecurity; declaring an emergency. | Passed committee | 28 June 2025 |
| OR | HB 3238 † | Relating to cybersecurity. Companion: OR HB 3822 | In committee | 28 June 2025 |
| OR | HB 4055 | Relating to information security; declaring an emergency. | In committee | 7 March 2026 |
| PA | HB 1209 † | An Act amending the act of March 10, 1949 (P.L.30, No.14), known as the Public School Code of 1949, in charter schools, providing for State certification for cyber charter school professional staff members. | In committee | 15 April 2025 |
| PA | HB 1219 † | An Act amending Title 71 (State Government) of the Pennsylvania Consolidated Statutes, in boards and offices, providing for information technology; establishing the Office of Information Technology and the Information Technology Fund; providing for administrative and procurement procedures and for the Joint Cybersecurity Oversight Committee; imposing duties on the Office of Information Technology; providing for administration of Pennsylvania Statewide Radio Network; and imposing penalties. Companion: PA HB 2104 | In committee | 15 April 2025 |
| PA | HB 1500 | An Act amending the act of March 10, 1949 (P.L.30, No.14), known as the Public School Code of 1949, in preliminary provisions, providing for Cyber Charter School Funding and Policy Council and further providing for advertising and sponsorships; in pupils and attendance, further providing for exceptional children and education and training; in charter schools, further providing for definitions, for funding for cyber charter schools, for powers and duties of department and for assessment and evaluation, providing for fund balance limits, further providing for cyber charter school requirements and prohibitions, providing for cyber charter school fund balance accountability, further providing for establishment of cyber charter school, for cyber charter school application, for enrollment and notification, for enrollee wellness checks and for applicability of other provisions of this act and of other acts and regulations and providing for cyber charter school moratorium; and, in reimbursements by Commonwealth and between school districts, further providing for extraordinary special education program expenses. | Passed chamber | 6 June 2025 |
| PA | HB 2358 † | An Act amending the act of March 10, 1949 (P.L.30, No.14), known as the Public School Code of 1949, in charter schools, further providing for funding for cyber charter schools. | In committee | 6 April 2026 |
| PA | HB 2375 † | An Act amending the act of March 10, 1949 (P.L.30, No.14), known as the Public School Code of 1949, in charter schools, further providing for definitions, for charter school requirements, for establishment of charter school, for causes for nonrenewal or termination, for powers and duties of department, for cyber charter school requirements and prohibitions and for establishment of cyber charter school; and, in the State Board of Education, further providing for powers and duties of the board. | In committee | 14 April 2026 |
| PA | HB 2602 † | An Act amending the act of March 10, 1949 (P.L.30, No.14), known as the Public School Code of 1949, in pupils and attendance, further providing for attendance policy at charter, regional charter and cyber charter schools; in charter schools, further providing for cyber charter school requirements and prohibitions and for enrollee wellness checks and providing for child protection and support plan; and imposing penalties. | Passed committee | 10 June 2026 |
| PA | HB 2672 † | An Act amending the act of April 9, 1929 (P.L.177, No.175), known as The Administrative Code of 1929, in organization of departmental administrative boards and commissions and of advisory boards and commissions, providing for Cybersecurity Coordination Board. | In committee | 26 June 2026 |
| PA | HB 480 | An Act amending the act of March 10, 1949 (P.L.30, No.14), known as the Public School Code of 1949, in charter schools, providing for full-time cyber education program offered by school district. | In committee | 4 February 2025 |
| PA | HB 688 † | An Act amending the act of March 10, 1949 (P.L.30, No.14), known as the Public School Code of 1949, in charter schools, providing for cyber charter school moratorium. | In committee | 21 February 2025 |
| PA | HB 997 † | An Act amending the act of December 22, 2005 (P.L.474, No.94), known as the Breach of Personal Information Notification Act, further providing for definitions, for notification of the breach of the security of the system, for exceptions and for notice exemption; repealing provisions relating to civil relief; providing for protection of personal information, for civil relief, for information security and for applicability; and repealing provisions relating to applicability. | Passed chamber | 3 October 2025 |
| PA | SB 27 † | An Act amending the act of March 10, 1949 (P.L.30, No.14), known as the Public School Code of 1949, in charter schools, providing for cyber charter school moratorium. | In committee | 6 March 2025 |
| PA | SB 373 | An Act amending Title 71 (State Government) of the Pennsylvania Consolidated Statutes, in boards and offices, providing for information technology and security. | In committee | 6 March 2025 |
| PA | SB 415 | An Act amending Title 18 (Crimes and Offenses) of the Pennsylvania Consolidated Statutes, in computer offenses, providing for the offense of ransomware; and imposing duties on the Office of Administration. | In committee | 10 March 2025 |
| PA | SB 934 | An Act amending the act of March 10, 1949 (P.L.30, No.14), known as the Public School Code of 1949, in cyber charter schools, further providing for enrollment and notification. | Passed committee | 17 July 2025 |
| RI | HB 5301 | AN ACT RELATING TO CRIMINAL OFFENSES-IDENTITY THEFT PROTECTION ACT OF 2015 | Dead | 11 February 2025 |
| RI | HB 5415 | AN ACT RELATING TO FINANCIAL INSTITUTIONS -- LICENSED ACTIVITIES Companion: RI SB 603 | Enacted | 2 July 2025 |
| RI | HB 5671 | AN ACT RELATING TO CRIMINAL OFFENSES -- COMPUTER CRIME Companion: RI SB 294 | Dead | 25 March 2025 |
| RI | HB 6385 | AN ACT RELATING TO STATUTES AND STATUTORY CONSTRUCTION | Enacted | 2 July 2025 |
| RI | HB 8058 † | AN ACT RELATING TO CRIMINAL OFFENSES -- COMPUTER CRIME | Passed chamber | 9 June 2026 |
| RI | SB 1037 | AN ACT RELATING TO CRIMINAL OFFENSES -- IDENTITY THEFT PROTECTION ACT OF 2015 Companion: RI HB 6346 | Passed chamber | 10 June 2025 |
| RI | SB 2638 | AN ACT RELATING TO CRIMINAL OFFENSES -- IDENTITY THEFT PROTECTION ACT OF 2015 Companion: RI HB 7509 | Passed chamber | 4 June 2026 |
| RI | SB 2981 | AN ACT RELATING TO CRIMINAL OFFENSES -- COMPUTER CRIME | Dead | 12 May 2026 |
| SC | H 3344 | State Infrastructure Protection Act | In committee | 14 January 2025 |
| SC | H 3369 | Government electronic devices Companion: SC H 3375 | In committee | 8 April 2025 |
| SC | H 4973 | Critical Infrastructure | In committee | 15 January 2026 |
| SD | SB 215 | provide for a pilot program for the implementation of a secured cryptographically end-to-end verifiable voting system in certain jurisdictions. | In committee | 23 February 2026 |
| SD | SB 49 | safeguard the integrity, privacy, and security of genetic data and provide a civil penalty therefor. | Enacted | 30 March 2026 |
| SD | SB 75 | amend the type of entities eligible to participate in the cybersecurity services initiative. | Enacted | 4 March 2026 |
| TN | HB 1033 | Civil Procedure - As introduced, creates an affirmative defense that may be utilized by a covered entity that is the subject of a data breach, if the covered entity’s cybersecurity program meets certain criteria at the time the breach occurs. - Amends TCA Title 20; Title 29 and Title 47, Chapter 18. Companion: TN SB 1421 | In committee | 11 February 2025 |
| TN | HB 2312 † | Criminal Offenses - As introduced, clarifies that the criminal offense of knowingly accessing a communication or computer system for the purpose of fraud or theft includes accessing a cloud computing service. - Amends TCA Title 4; Title 10; Title 35; Title 37; Title 38; Title 39; Title 40; Title 45; Title 47; Title 65; Title 66; Title 67 and Title 71. Companion: TN SB 2523 | Introduced | 5 February 2026 |
| TN | HB 481 † | State Government - As introduced, increases membership of the information systems council by adding a state employee with experience in the field of cybersecurity, to be appointed by the governor. - Amends TCA Title 4, Chapter 3. Companion: TN SB 1370 | In committee | 5 February 2025 |
| TN | HB 511 † | Insurance, Health, Accident - As introduced, requires a healthcare provider, healthcare group, practice, or clinic, healthcare facility, or other entity to provide notice to each health insurance entity with which it is under contract as soon as practicable if the healthcare provider, healthcare group, practice, or clinic, healthcare facility, or other entity is the subject of a cyber-attack. - Amends TCA Title 33; Title 56; Title 63; Title 68, Chapter 11 and Title 71. Companion: TN SB 555 | Introduced | 5 February 2025 |
| TN | HB 549 | State Government - As introduced, creates the "Tennessee Critical Infrastructure Act." - Amends TCA Title 4. Companion: TN SB 378 | In committee | 5 February 2025 |
| TX | HB 1170 | Relating to analysis and mitigation of transportation security threats in this state. | In committee | 7 March 2025 |
| TX | HB 1172 | Relating to requiring the Department of Information Resources to conduct a study concerning the cybersecurity of small businesses. | In committee | 7 March 2025 |
| TX | HB 130 | Relating to genetic information security for residents of this state; providing a civil penalty; providing a private cause of action. Companion: TX SB 2429 | Enacted | 20 June 2025 |
| TX | HB 132 | Relating to the confidentiality of information used to prevent, detect, respond to, or investigate a hostile act of a foreign adversary of the United States. | Enacted | 20 June 2025 |
| TX | HB 150 | Relating to the establishment of the Texas Cyber Command and the transfer to it of certain powers and duties of the Department of Information Resources. | Enacted | 2 June 2025 |
| TX | HB 3112 | Relating to the application of the open meetings law and public information law to government information related to certain cybersecurity measures. | Enacted | 20 June 2025 |
| TX | HB 3185 | Relating to investigations of certain cybercrimes. | Enacted | 20 June 2025 |
| TX | HB 3512 | Relating to artificial intelligence training programs for certain employees and officials of state agencies and local governments. | Enacted | 20 June 2025 |
| TX | HB 4231 | Relating to cybersecurity for retail public utilities that provide water or sewer service. Companion: TX SB 1034 | In committee | 31 March 2025 |
| TX | HB 5331 | Relating to the enforceability of certain state agency and local government contract language regarding required security incident notifications. | Enacted | 20 June 2025 |
| TX | HB 876 | Relating to the establishment of certain information sharing and analysis organizations by the Department of Information Resources. | Passed chamber | 21 May 2025 |
| TX | SB 1063 | Relating to prohibiting contracts or other agreements with foreign-owned companies in connection with agricultural land. | In committee | 24 February 2025 |
| TX | SB 1348 | Relating to the establishment and powers and duties of the Texas Advisory Committee on Pacific Conflict. | Introduced | 18 February 2025 |
| TX | SB 1585 | Relating to a prohibition on governmental contracts with companies of foreign adversaries for certain information and communications technology; authorizing a civil penalty; creating a criminal offense. | Passed chamber | 27 May 2025 |
| TX | SB 1625 | Relating to the reporting of certain security incidents by public water systems to the Texas Commission on Environmental Quality and the Department of Information Resources. | Passed chamber | 21 May 2025 |
| TX | SB 1686 | Relating to requiring the cybersecurity council to conduct a study concerning the cybersecurity of school districts. | In committee | 11 March 2025 |
| TX | SB 1847 | Relating to prohibiting contracts or other agreements with certain foreign-owned companies in connection with critical infrastructure in this state and the use of certain technology purchased or leased from those companies. | In committee | 13 March 2025 |
| TX | SB 2176 | Relating to the establishment of the Texas Cyber Command as a component institution of The University of Texas System and the transfer to it of certain powers and duties of the Department of Information Resources. | In committee | 24 March 2025 |
| TX | SB 2404 | Relating to the continuation and functions of the Department of Information Resources, including the composition of the governing body of the department. | In committee | 25 March 2025 |
| TX | SB 2610 | Relating to a limitation on civil liability of business entities in connection with a breach of system security. | Enacted | 20 June 2025 |
| TX | SB 55 † | Relating to class action certification for actions brought against certain health care entities for disclosure of health care information as a result of a cyber attack. | Introduced | 31 July 2025 |
| TX | SB 78 | Relating to the security of election systems. | In committee | 3 February 2025 |
| US | H.J.Res. 40 | Providing for congressional disapproval under chapter 8 of title 5, United States Code, of the rule submitted by the Department of Defense relating to "Cybersecurity Maturity Model Certification (CMMC) Program". | In committee | 12 February 2025 |
| US | H.R. 10238 | Cybersecurity for Small Businesses Act of 2026 | Passed committee | 16 September 2026 |
| US | H.R. 10362 | Stop Rogue AI Act | In committee | 14 September 2026 |
| US | H.R. 10474 | CISA Force Structure Assessment Act | In committee | 16 September 2026 |
| US | H.R. 10519 | To direct the Secretary of Homeland Security, acting through the Director of the Cybersecurity and Infrastructure Security Agency, to establish a Critical Infrastructure AI Cyber Defense Pilot Program, and for other purposes. | In committee | 21 September 2026 |
| US | H.R. 10568 | Protecting Biological Data as Critical Infrastructure Act | In committee | 24 September 2026 |
| US | H.R. 10569 | Protecting Biotechnology and Biomanufacturing as Critical Infrastructure Act Companion: US S. 5502 | In committee | 24 September 2026 |
| US | H.R. 10671 † | To amend the Cyber Incident Reporting for Critical Infrastructure Act of 2022 to reauthorize a program of the Cybersecurity and Infrastructure Security Agency relating to security vulnerability warnings, and for other purposes. | In committee | 1 October 2026 |
| US | H.R. 1165 | Port Crane Security and Inspection Act of 2025 | In committee | 10 February 2025 |
| US | H.R. 1258 | Improving Contractor Cybersecurity Act | In committee | 12 February 2025 |
| US | H.R. 2363 | DOGE POUND Act of 2025 | In committee | 26 March 2025 |
| US | H.R. 2978 | GUARD Act | Passed committee | 16 September 2026 |
| US | H.R. 3026 | Protecting America’s Cybersecurity Act | In committee | 24 April 2025 |
| US | H.R. 3278 | Protecting Critical Infrastructure Act | In committee | 8 May 2025 |
| US | H.R. 4046 | Cybersecurity in Agriculture Act of 2025 | In committee | 17 June 2025 |
| US | H.R. 5079 | Widespread Information Management for the Welfare of Infrastructure and Government Act | Introduced | 3 September 2025 |
| US | H.R. 5868 | Water Cybersecurity Enhancement Act of 2025 | In committee | 28 October 2025 |
| US | H.R. 7257 | SECURE Grid Act | Passed committee | 30 September 2026 |
| US | H.R. 7625 | MTS CYBER Act of 2026 | Passed committee | 15 September 2026 |
| US | H.R. 8730 | Connected Vehicle Security Act of 2026 | In committee | 11 May 2026 |
| US | H.R. 9492 | Cybersecurity Logging Enforcement and Accountability Reporting Act | In committee | 7 July 2026 |
| US | H.R. 9918 | Enhancing K–12 Cybersecurity Act | In committee | 24 July 2026 |
| US | S. 1007 | 9–8–8 Lifeline Cybersecurity Responsibility Act | In committee | 12 March 2025 |
| US | S. 1018 | Cybersecurity for Rural Water Systems Act | In committee | 13 March 2025 |
| US | S. 1118 | Water Intelligence, Security, and Cyber Threat Protection Act of 2025 | In committee | 25 March 2025 |
| US | S. 1263 | Operational Security Act of 2025 | In committee | 2 April 2025 |
| US | S. 1337 † | Cybersecurity Information Sharing Extension Act | In committee | 8 April 2025 |
| US | S. 1899 | Federal Contractor Cybersecurity Vulnerability Reduction Act of 2025 | In committee | 22 May 2025 |
| US | S. 1943 | Protecting Seniors' Data Act of 2025 | In committee | 4 June 2025 |
| US | S. 2950 | Scam Compound Accountability and Mobilization Act | Introduced | 9 December 2025 |
| US | S. 3315 | Health Care Cybersecurity and Resiliency Act of 2026 | Introduced | 5 October 2026 |
| US | S. 3404 | Satellite Cybersecurity Act of 2025 | Introduced | 24 September 2026 |
| US | S. 3519 | Remote Access Security Act | In committee | 17 December 2025 |
| US | S. 4166 | SECURE Grid Act | Passed committee | 30 September 2026 |
| US | S. 431 | Cyber Conspiracy Modernization Act | In committee | 5 February 2025 |
| US | S. 438 | Cyber PIVOTT Act of 2025 | In committee | 5 February 2025 |
| US | S. 4429 | Connected Vehicle Security Act of 2026 | Passed committee | 22 September 2026 |
| US | S. 4570 | U.S. Tech PATH Act | Passed committee | 27 July 2026 |
| US | S. 4699 | Guaranteeing Universal Access to Cybersecurity Act | In committee | 8 June 2026 |
| US | S. 5313 | Quantum-GUARD Act of 2026 | In committee | 6 August 2026 |
| US | S. 5360 | Rural and Municipal Utility Cybersecurity Act | Passed committee | 30 September 2026 |
| US | S. 5504 | A bill to require the Secretary of Defense to establish a pilot program on Department of Defense partnerships with institutions of higher education recognized in the National Centers of Academic Excellence in Cybersecurity program for Cyber Research, and for other purposes. | In committee | 24 September 2026 |
| US | S. 5508 † | A bill to establish a public-private working group to develop cybersecurity best practices for telecommunications carriers and related supply chain participants, and for other purposes. | In committee | 24 September 2026 |
| US | S. 5541 † | A bill to establish the Cybersecurity and AI Board of Investigations, and for other purposes. | In committee | 24 September 2026 |
| US | S. 5548 † | Securing National Security Systems from Chinese Optical Transceivers Act of 2026 | In committee | 24 September 2026 |
| UT | HB 165 | Critical Infrastructure Amendments | Enacted | 17 March 2026 |
| UT | HB 19 | Drinking Water Utilities Amendments | Enacted | 27 February 2026 |
| UT | HB 357 | Amendments to Motor Vehicle Data Privacy | Enacted | 19 March 2026 |
| UT | HB 42 | School Cybersecurity Amendments | Passed chamber | 7 March 2026 |
| UT | HB 444 | Data Privacy Amendments | Enacted | 27 March 2025 |
| UT | HB 450 | Data Privacy Amendments | Enacted | 19 March 2026 |
| UT | HB 468 | Automatic License Plate Reader Amendments | Passed chamber | 8 March 2025 |
| UT | HB 492 | Drinking Water Utilities Amendments | Passed chamber | 8 March 2025 |
| UT | HB 542 † | Multi-factor Authentication Amendments | Introduced | 7 March 2026 |
| UT | SB 123 | Privacy and Cybersecurity Amendments | Enacted | 17 March 2026 |
| UT | SB 275 | State-Endorsed Digital Identity Program Amendments | Enacted | 25 March 2026 |
| VA | HB 1334 | Militia state active duty; cyber-related support. | Enacted | 8 April 2026 |
| VA | HB 2038 | Insecure uncrewed aircraft systems; prohibition on procurement and use, report. | In committee | 5 February 2025 |
| VA | HB 2268 | Emerging Technologies, Cybersecurity, and Data Privacy, Division of; established. | Passed committee | 4 February 2025 |
| VA | HB 638 | Data brokers; regulation, civil penalties. | In committee | 9 February 2026 |
| VA | HB 638 † | Data brokers; regulation, civil penalties. | In committee | 9 February 2026 |
| VA | HB 83 † | Virginia Information Technologies Agency; powers of the CIO; creation of Cyber Civilian Corps. | In committee | 2 February 2026 |
| VA | HB 83 | Virginia Information Technologies Agency; powers of the CIO; creation of Cyber Civilian Corps. | In committee | 2 February 2026 |
| VA | SB 1239 | Cybersecurity; electric service by investor-owned electric utilities, report. | Enacted | 24 March 2025 |
| VT | H 560 | An act relating to the Cybersecurity Advisory Council | Introduced | 6 January 2026 |
| VT | H 630 † | An act relating to adopting minimum security standards for connected devices | Introduced | 9 January 2026 |
| VT | S 70 | An act relating to data brokers and personal information | Introduced | 18 February 2025 |
| WA | SB 5014 | Concerning election security. | Enacted | 17 May 2025 |
| WA | SB 5892 | Concerning protection of the voter registration database. | Enacted | 25 March 2026 |
| WV | HB 4201 † | Relating to authorizing the Office of Technology to promulgate a legislative rule relating to cyber reporting. | In committee | 14 January 2026 |
| WV | HB 5638 † | Relating to the requirements of the state’s cyber security program and responsibilities and authority of the state chief information security officer | Enacted | 29 June 2026 |
| WV | SB 252 | Office of Technology rule relating to cyber reporting | In committee | 11 February 2026 |
† Matched on the bill's title alone, because the platform does not yet hold that bill's full text. Every other bill is matched on its whole document.
Each month's issue of the Cybersecurity Legislation Tracker, emailed when it is published, and every bill behind it in your dashboard with its status and history as it moves. Start a 14-day trial.
Published by LawSignals. Cybersecurity Legislation Tracker is issued monthly. lawsignals.com/cybersecurity