1 of 1 SENATE DOCKET, NO. 2020 FILED ON: 1/17/2025 SENATE . . . . . . . . . . . . . . No. 42 The Commonwealth of Massachusetts _________________ PRESENTED BY: Paul W. Mark _________________ To the Honorable Senate and House of Representatives of the Commonwealth of Massachusetts in General Court assembled: The undersigned legislators and/or citizens respectfully petition for the adoption of the accompanying bill: An Act protecting against cyber ransom. _______________ PETITION OF: NAME:DISTRICT/ADDRESS :Paul W. MarkBerkshire, Hampden, Franklin and Hampshire 1 of 1 SENATE DOCKET, NO. 2020 FILED ON: 1/17/2025 SENATE . . . . . . . . . . . . . . No. 42 By Mr. Mark, a petition (accompanied by bill, Senate, No. 42) of Paul W. Mark for legislation to protect against cyber ransom. Advanced Information Technology, the Internet and Cybersecurity. [SIMILAR MATTER FILED IN PREVIOUS SESSION SEE SENATE, NO. 35 OF 2023-2024.] The Commonwealth of Massachusetts _______________ In the One Hundred and Ninety-Fourth General Court (2025-2026) _______________ An Act protecting against cyber ransom. Be it enacted by the Senate and House of Representatives in General Court assembled, and by the authority of the same, as follows: 1 Chapter 7D of the General Laws as appearing in the 2022 Official Edition is hereby 2amended in Section 7 by adding the following subsections:- 3 (e) No State agency, local government entity, or municipality shall submit payment or 4otherwise communicate with an entity that has engaged in a cybersecurity incident on an 5information technology system by encrypting data and then subsequently offering to decrypt that 6data in exchange for a ransom payment. 7 (f) Any State agency or local government entity experiencing a ransom request in 8connection with a cybersecurity incident shall report to and consult with the CIO.