HB4443 Summary

• Modifies Freedom of Information Act exemptions to clarify that cybersecurity vulnerabilities are exempt from disclosure when disclosure could reasonably expose vulnerabilities or jeopardize effectiveness of security measures, policies, or plans.

• Creates Technology, Education, and Cybersecurity Fund as a special fund in the State treasury for the Department of Innovation and Technology to promote information technology activities and accept grants and donations.

• Requires municipalities with population 35,000+ and all counties to designate a local official or employee as primary point of contact for cybersecurity issues and provide contact information to the Department.

• Mandates the Secretary of Innovation and Technology to establish a cybersecurity liaison program to advise and assist local governments and school districts with cyber threats, risk assessments, best practices, and incident response.

• Requires all county, municipal, and school district employees to complete annual cybersecurity training covering phishing scams, spyware prevention, identity theft, and data breach response; prohibits state agencies from purchasing products banned by federal Department of Homeland Security due to cybersecurity risks.