Bill > H2814

This bill aims to address cybercrime through enhanced criminal penalties, civil remedies, and transparency. The key provisions include: 1. Amending existing laws to provide civil liability exemptions for data owners/licensors who are in compliance with data security requirements and where the breach was not due to intentional misconduct or negligence. Victims can still bring civil actions for damages. 2. Allowing data owners/licensors who provide required breach notifications to bring civil actions against those who unlawfully obtained or benefited from their information. 3. Establishing a special commission to assess cybersecurity threats across the Commonwealth, recommend legislative and risk management strategies, and improve data security without unduly burdening data storage entities. 4. Expanding the definition of "personal information" and requiring comprehensive information security programs for entities that own or license such information. 5. Increasing criminal penalties for various computer-related offenses, including longer potential sentences and higher fines, especially where significant damages or risks to public safety occur.

Labor and Employment

https://malegislature.gov/Bills/190/H2814