All Roll Calls
Yes: 172 • No: 0
MarylandHB 09572026 Regular SessionHouseWALLET
Cybersecurity - Standards and Compliance - Alterations
Sponsored By: Chao Wu (Democratic)
Signed by Governor
CybersecurityPrimary and Secondary EducationCertificationsCommunications -see also- ElecComm; Intergov; etc.Education, Boards ofEvaluations and ReviewsInformation Technology, Department ofLocal Government MandatesPublic Schools -see also- Primary Schools; Secondary SchReportsRevenue and Taxes -see also- (specific tax)Standards and Best Practices
Your PRIA Score
Score Hidden
Personalized for You
How does this bill affect your finances?
Sign up for a PRIA Policy Scan to see your personalized alignment score for this bill and every other piece of legislation we track. We analyze your financial profile against policy provisions to show you exactly what matters to your wallet.
Bill Overview
Analyzed Economic Effects
5 provisions identified: 3 benefits, 0 costs, 2 mixed.
Stronger cybersecurity rules for schools
Starting in 2027, every local school system follows the State minimum cybersecurity standards and completes a maturity check every two years. By June 30, 2027, and every two years after, each system must certify it meets the standards. Beginning July 1, 2026, each school system names a local cybersecurity contact and tells the State CISO. The Department of Information Technology helps on request, but it does not manage schools’ daily IT work. For the 2026–2027 school year, the State focuses on Protect controls. The State reviews the minimum standards every year and updates them as needed.
Local cyber incident reporting and alerts
Starting July 1, 2026, local governments must report cybersecurity incidents, including attacks on State systems they use, to the local emergency manager and the State Security Operations Center. The State CISO sets what must be reported, how to report it, and the deadlines. The State Security Operations Center must immediately notify the right agencies when it gets a report. This speeds response and coordination.
Local cyber preparedness plans and assessments
Beginning July 1, 2026, each county government, local school system, and local health department must create or update a cyber preparedness and response plan with the local emergency manager and complete a preparedness assessment. Assessments can be done by the State or a State‑authorized vendor, based on the county’s preference. Some municipal governments are excluded where the law specifies. The Department sets how often and how to do these steps.
Annual school tech and internet reporting
By August 15, 2026, and each August 15 after, every county board reports last year’s spending on devices, connectivity, IT staff, and cybersecurity. The report also shows what share of students, teachers, and staff have devices and adequate home broadband. This improves transparency on where tech and cybersecurity money goes.
Schools: cybersecurity allowed, device priority ends
Beginning July 1, 2026, schools can use per‑pupil educational technology funds for cybersecurity costs. The law also ends the rule that these funds must first go to buying digital devices. Districts have more flexibility to balance devices, connectivity, IT staff, and cybersecurity.
Free Policy Watch
You just read the policy. Now see what it costs you.
Pick a topic. PRIA runs your household against live legislation and sends you a free personalized readout.
Pick a topic to get started
Sponsors & Cosponsors
Sponsor
Chao Wu
Democratic • House
Cosponsors
Kris Fair
Democratic • House
Anne R. Kaiser
Democratic • House
April Rose
Republican • House
Ryan Spiegel
Democratic • House
Roll Call Votes
Senate vote • 4/8/2026
Third Reading Passed
Yes: 43 • No: 0 • Other: 3
House vote • 3/21/2026
Third Reading Passed
Yes: 129 • No: 0 • Other: 6
Actions Timeline
Approved by the Governor - Chapter 34
4/14/2026Returned Passed
4/8/2026HouseThird Reading Passed (43-0)
4/8/2026SenateFavorable Adopted Second Reading Passed
4/3/2026SenateFavorable Report by Education, Energy, and the Environment
4/2/2026SenateReferred Education, Energy, and the Environment
3/23/2026SenateThird Reading Passed (129-0)
3/21/2026HouseSecond Reading Passed with Amendments
3/20/2026HouseFavorable with Amendments {903929/1 Adopted
3/20/2026HouseFavorable with Amendments Report by Government, Labor, and Elections
3/20/2026HouseHearing 2/27 at 1:00 p.m.
2/19/2026HouseFirst Reading Government, Labor, and Elections
2/5/2026House
Bill Text
Enacted
4/14/2026
Third Reading
3/20/2026
First Reading
2/5/2026
Related Bills
SB 1007 — Prior Authorizations of State Debt - Alterations
SB 0940 — Environment - Water Quality Testing - Secondary Maximum Contaminant Levels Action Plan
SB 0915 — State Board of Physicians - Delegation of Duties - Alterations
SB 0777 — Labor and Employment - Workforce Development - Hospital Employee Retraining and Placement Program and Workforce Development and Local Workforce Development Boards (Local Workforce Solutions Investment Act)
SB 0772 — Maryland Department of Health - Employment Training and Opportunity Database
SB 0742 — Maryland Medical Assistance Program and Developmental Disabilities Administration - Home- and Community-Based Services Eligibility Determinations (Maryland Protecting People With Disabilities Act)
Take It Personal
Get Your Personalized Policy View
Take the PRIA Score to see how policy affects your household, then upgrade to PRIA Full Coverage for year-round monitoring.
Already have an account? Sign in