2025 Senate Bill 363

Senate Fiscal Agency Analysis

Senate Bills 360-64 would require private and State entities that had access to State residents' personal information to maintain security procedures for the protection of that information. These procedures would include the assignment of a security coordinator and the implementation of appropriate safeguards to protect the information, among other things. An entity that reasonably conformed to an industry recognized cybersecurity framework would meet the bill's requirements if specific circumstances applied. In the case of a security breach, the bill would require an entity to notify affected residents and provide specific information concerning consumer protections and actions taken to rectify the breach. If a breach affected more than 100 residents, the entity would have to notify the Attorney General. The bill would prescribe civil fines for failing to comply with the its requirements.