All Roll Calls
Yes: 160 • No: 1
Sponsored By: Wayne A. Harper (Republican)
Signed by Governor
Personalized for You
Sign up for a PRIA Policy Scan to see your personalized alignment score for this bill and every other piece of legislation we track. We analyze your financial profile against policy provisions to show you exactly what matters to your wallet.
5 provisions identified: 4 benefits, 0 costs, 1 mixed.
Beginning May 6, 2026, the state creates the Utah Cyber Center, led by the chief information security officer. The Center works with public safety, schools, higher education, local governments, federal partners, and private experts. It must write a statewide cybersecurity plan for government entities by January 1, 2027. It helps executive agencies and local education agencies respond to data breaches, including investigations and system recovery. It also shares threat intelligence and serves as the state hub to receive breach reports. Work happens within legislative funding.
Beginning May 6, 2026, a data breach includes unauthorized access, loss, or destruction that affects 500 or more people, or harms a government system’s security. Government entities that must report a breach must share their breach records with the Cyber Center. The Center can keep breach information confidential and share it only as allowed under state records law.
Beginning May 6, 2026, the law creates the Utah Cyber Center Restricted Account in the General Fund. Money comes from legislative appropriations, federal grants, private gifts, and interest, and interest stays in the account. Subject to appropriations, funds pay for the statewide plan, cyber tools, incident response, audits, training, and technology. The account is nonlapsing, so money can carry over across budget years.
Beginning May 6, 2026, the law sets up a statewide Cybersecurity Commission. A governor’s designee and the public safety commissioner co-chair it. Members serve four-year staggered terms, reflect urban, rural, and suburban areas, and at least half have IT or cybersecurity experience. The commission meets at least twice a year. This section ends July 1, 2032.
Beginning May 6, 2026, the law repeals the prior zero‑trust architecture reporting statute. Agencies and officials no longer have those reporting duties, reducing compliance tasks.
Wayne A. Harper
Republican • Senate
Ryan D. Wilcox
Republican • House
All Roll Calls
Yes: 160 • No: 1
Senate vote • 3/6/2026
Senate/ concurs with House amendment
Yes: 27 • No: 0
House vote • 3/5/2026
House/ passed 3rd reading
Yes: 71 • No: 0
House vote • 3/5/2026
House/ uncircled
Yes: 0 • No: 0
House vote • 3/5/2026
House/ floor amendment
Yes: 0 • No: 0
House vote • 2/26/2026
House/ circled
Yes: 0 • No: 0
House vote • 2/24/2026
House Comm - Favorable Recommendation
Yes: 8 • No: 1
Senate vote • 2/18/2026
Senate/ passed 3rd reading
Yes: 22 • No: 0
Senate vote • 2/17/2026
Senate/ substituted
Yes: 0 • No: 0
Senate vote • 2/17/2026
Senate/ passed 2nd reading
Yes: 25 • No: 0
House vote • 1/29/2026
Senate Comm - Substitute Recommendation
Yes: 3 • No: 0
House vote • 1/29/2026
Senate Comm - Favorable Recommendation
Yes: 4 • No: 0
Governor Signed
Senate/ to Governor
Senate/ received enrolled bill from Printing
Senate/ enrolled bill to Printing
Enrolled Bill Returned to House or Senate
Draft of Enrolled Bill Prepared
Bill Received from Senate for Enrolling
Senate/ signed by President/ sent for enrolling
Senate/ received from House
House/ to Senate
House/ signed by Speaker/ returned to Senate
House/ received from Senate
Senate/ to House
Senate/ concurs with House amendment
Senate/ placed on Concurrence Calendar
Senate/ placed on Concurrence Calendar
Senate/ received from House
House/ to Senate
House/ passed 3rd reading
House/ floor amendment
House/ uncircled
House/ circled
House/ 3rd reading
House/ 2nd reading
House/ committee report favorable
Enrolled
3/11/2026
Amended 3/5/2026 19:03:676
3/5/2026
Substitute #2
2/13/2026
Substitute #1
1/15/2026
Introduced
1/12/2026