Bill > HB1666

This bill amends the Arkansas Self-Funded Cyber Response Program's legal framework by making several key modifications. It revises the definitions section, removing references to a "cyber response panel" and renumbering existing definitions. The bill clarifies that the cyber response program is secondary to any existing insurance and is used to reimburse participating governmental entities for losses. The legislation eliminates previous language about legal liability for civil rights violations and removes the requirement to create a cyber response panel. Instead, it mandates that the Cyber Response Board establish a definition of cyberattacks based on industry standards, review this definition annually, and set minimum cybersecurity standards for participating entities. The board will now designate a cyber response contact who must notify the board about cyberattacks and follow specific procedures for determining program coverage. The bill limits program coverage to a maximum of $50,000 for entities that have not met the board's minimum cybersecurity standards. Participating governmental entities include counties, municipalities, and school districts, and the program aims to provide a structured approach to addressing cybersecurity incidents for local government organizations in Arkansas.

Transportation and Infrastructure

https://arkleg.state.ar.us/Bills/Detail?id=hb1666&ddBienniumSession=2025%2F2025R