Bill

Bill > H7055


FL H7055

FL H7055
Cybersecurity


summary

Introduced
02/03/2022
In Committee
03/04/2022
Crossed Over
03/09/2022
Passed
03/09/2022
Dead
Signed/Enacted/Adopted
06/28/2022

Introduced Session

2022 Regular Session

Bill Summary

An act relating to cybersecurity; amending s. 252.351, F.S.; requiring a list of reportable incidents maintained by the Division of Emergency Management to include cybersecurity incidents and ransomware incidents; requiring a political subdivision to report cybersecurity incidents and ransomware incidents to the State Watch Office; amending s. 282.0041, F.S.; providing definitions; amending s. 282.318, F.S.; requiring the Department of Management Services, acting through the Florida Digital Service, to develop and publish guidelines and processes for reporting cybersecurity incidents to certain entities; requiring a state agency to report certain information following a cybersecurity or ransomware incident; requiring the department, acting through the Florida Digital Service, to develop and publish guidelines for the submission of after-action reports, provide annual cybersecurity training to certain persons, and provide after-action reports to the Florida Cybersecurity Advisory Council on a monthly basis; requiring state agency heads to annually provide cybersecurity awareness training to certain persons and report cybersecurity incidents, ransomware incidents, and cybersecurity breaches to specified entities; hb7055-00 HB 7055 requiring ransomware incidents to be reported within a certain period; requiring state agency heads to submit certain after-action reports to the Florida Digital Service; creating s. 282.3185, F.S.; providing a short title; providing a definition; requiring the Florida Digital Service to develop certain cybersecurity training curriculum; requiring certain persons to complete certain training within a specified period and annually thereafter; authorizing the Florida Digital Service to provide certain training in collaboration with certain entities; requiring certain local governments to adopt certain cybersecurity standards by specified dates; requiring a local government to provide certain notification to the Florida Digital Service; requiring a local government to notify the State Watch Office and sheriff of a cybersecurity incident or ransomware incident; providing notification requirements; requiring the office to immediately forward certain information to the Cybersecurity Operations Center and the Cybercrime Office of the Department of Law Enforcement; authorizing the Cybersecurity Operations Center and the Cybercrime Office to provide certain support to a local government; requiring the Cybersecurity Operations Center to provide certain information to hb7055-00 HB 7055 the Florida Cybersecurity Advisory Council; requiring a local government to submit to the Florida Digital Service an after-action report containing certain information; requiring the Florida Digital Service to provide after-action reports to the council on a monthly basis; requiring the Florida Digital Service to establish certain guidelines by a specified date; creating s. 282.3186, F.S.; prohibiting certain entities from paying or otherwise complying with a ransom demand; amending s. 282.319, F.S.; revising the purpose of the Florida Cybersecurity Advisory Council to include advising counties and municipalities on cybersecurity; requiring the council to meet at least quarterly to review certain information and develop and make certain recommendations; requiring the council to annually submit to the Governor and the Legislature a certain ransomware incident report beginning on a specified date; providing requirements for the report; providing a definition; creating s. 815.062, F.S.; providing a definition; providing criminal penalties; requiring a person convicted of certain offenses to pay a certain fine; requiring deposit of certain moneys in the General Revenue Fund; providing a legislative finding and declaration of an important state interest; providing an effective date. hb7055-00 HB 7055

AI Summary

This bill: - Amends the definition of "incident" to include cybersecurity incidents and ransomware incidents, and defines "ransomware incident" as a malicious cybersecurity incident where data is encrypted or rendered unavailable and a ransom is demanded. - Requires the Department of Management Services, through the Florida Digital Service, to develop guidelines and processes for reporting cybersecurity incidents to certain entities, and requires state agencies to report cybersecurity and ransomware incidents within specified timeframes. - Requires the Florida Digital Service to develop cybersecurity training curriculum for local government employees, and requires local governments to adopt cybersecurity standards. - Prohibits state agencies, counties, and municipalities from paying or complying with ransom demands. - Expands the purpose of the Florida Cybersecurity Advisory Council to include advising counties and municipalities on cybersecurity, and requires the council to submit an annual report on ransomware incidents. - Creates criminal penalties for individuals who introduce malicious software to governmental entities and demand a ransom.

Committee Categories

Budget and Finance, Government Affairs

Sponsors (8)

Other Sponsors (2)

State Administration and Technology Appropriations Subcommittee (House), State Affairs Committee (House)

Last Action

Ordered enrolled (on 03/09/2022)

bill text


bill summary

Loading...

bill summary

Loading...
Loading...