Bill > HB209

This bill repeals an existing requirement for county governments, local school systems, and local health departments to create or update cybersecurity preparedness and response plans and complete cybersecurity preparedness assessments. Specifically, the legislation removes a section of the State Finance and Procurement article that mandated these local entities, in consultation with their local emergency managers, to develop and maintain cybersecurity plans and assessments according to regulations established by the Department of Information Technology. The bill explicitly notes that the original provision did not apply to municipal governments. Additionally, the bill makes some technical adjustments by renumbering subsequent sections and sets the effective date as July 1, 2025. The government summary describes this as eliminating a duplicative legal provision, suggesting that the cybersecurity planning requirements may be redundant with other existing regulations or procedures.

Education, Health and Social Services

Health and Government Operations (H)

https://mgaleg.maryland.gov/mgawebsite/Legislation/Details/HB0209?ys=2025RS