Maryland 2025 2025 Regular Session

Maryland House Bill HB376 Engrossed / Bill

Filed 02/25/2025

                     
 
EXPLANATION: CAPITALS INDICATE MAT TER ADDED TO EXISTIN G LAW. 
        [Brackets] indicate matter deleted from existing law. 
         Underlining indicates amendments to bill. 
         Strike out indicates matter stricken from the bill by amendment or deleted from the law by 
amendment. 
          *hb0376*  
  
HOUSE BILL 376 
P1, S2   	5lr1418 
    	CF SB 294 
By: Chair, Health and Government Operations Committee 
Introduced and read first time: January 16, 2025 
Assigned to: Health and Government Operations 
Committee Report: Favorable with amendments 
House action: Adopted 
Read second time: February 22, 2025 
 
CHAPTER ______ 
 
AN ACT concerning 1 
 
Maryland Cybersecurity Council – Membership – Alterations 2 
 
FOR the purpose of altering the membership, selection of the membership, and chair of the 3 
Maryland Cybersecurity Council; and generally relating to Maryland Cybersecurity 4 
Council membership. 5 
 
BY repealing and reenacting, without amendments, 6 
 Article – State Government 7 
Section 9–2901(b) 8 
 Annotated Code of Maryland 9 
 (2021 Replacement Volume and 2024 Supplement) 10 
 
BY repealing and reenacting, with amendments, 11 
 Article – State Government 12 
Section 9–2901(c) and (f) 13 
Annotated Code of Maryland 14 
 (2021 Replacement Volume and 2024 Supplement) 15 
 
BY repealing 16 
 Article – State Government 17 
Section 9–2901(g) 18 
Annotated Code of Maryland 19 
 (2021 Replacement Volume and 2024 Supplement) 20 
 
BY adding to 21  2 	HOUSE BILL 376  
 
 
 Article – State Government 1 
Section 9–2901(g) 2 
Annotated Code of Maryland 3 
 (2021 Replacement Volume and 2024 Supplement) 4 
 
 SECTION 1. BE IT ENACTED BY THE GENERAL ASSEMBLY OF MARYLAND, 5 
That the Laws of Maryland read as follows: 6 
 
Article – State Government 7 
 
9–2901. 8 
 
 (b) There is a Maryland Cybersecurity Council. 9 
 
 (c) The Council consists of the following members: 10 
 
 (1) the Attorney General, or the Attorney General’s designee; 11 
 
 (2) the Secretary of Information Technology, or the Secretary’s designee; 12 
 
 (3) the Secretary of State Police, or the Secretary’s designee; 13 
 
 (4) the Secretary of Commerce, or the Secretary’s designee; 14 
 
 (5) the Adjutant General, or the Adjutant General’s designee; 15 
 
 (6) the State Administrator of Elections, or the State Administrator’s 16 
designee; 17 
 
 (7) the Executive Director of the Governor’s Office of Homeland Security, 18 
or the Executive Director’s designee; 19 
 
 (8) the Director of the Maryland Coordination and Analysis Center, or the 20 
Director’s designee; 21 
 
 (9) the Secretary of Emergency Management, or the Secretary’s designee; 22 
 
 (10) the Chief Executive Officer of the Maryland Technology Development 23 
Corporation, or the Chief Executive Officer’s designee; 24 
 
 (11) the Chair of the Tech Council of Maryland, or the Chair’s designee; 25 
 
 (12) THE EXECUTIVE DIRECTOR OF THE CYBERSECURITY 26 
ASSOCIATION, INC., OR THE EXECUTIVE DIRECTOR’S DESIGNEE;  27 
 
 (12) (13) the President of the Fort Meade Alliance, or the President’s 28 
designee; 29   	HOUSE BILL 376 	3 
 
 
 
 (13) (14) the President of the Army Alliance, or the President’s designee; 1 
and 2 
 
 (14) (15) the following members appointed by the [Attorney General] 3 
GOVERNOR: 4 
 
 (i) five representatives of cybersecurity companies located in the 5 
State, with at least three representing cybersecurity companies with 50 or fewer employees; 6 
 
 (ii) four representatives from statewide or regional business 7 
associations; 8 
 
 (iii) up to ten representatives from institutions of higher education 9 
located in the State; 10 
 
 (iv) one representative of a crime victims organization; 11 
 
 (v) four representatives from industries that may be susceptible to 12 
attacks on cybersecurity, including at least one representative of a bank, whether or not 13 
State–chartered, that has a branch in the State; 14 
 
 (vi) two representatives of organizations that have expertise in 15 
electronic health care records; and 16 
 
 (vii) any other stakeholder that the [Attorney General] GOVERNOR 17 
determines appropriate. 18 
 
 (f) The [Attorney General] GOVERNOR also shall invite, as appropriate, the 19 
following representatives of federal agencies to serve on the Council: 20 
 
 (1) the Director of the National Security Agency, or the Director’s designee; 21 
 
 (2) the Secretary of Homeland Security, or the Secretary’s designee; 22 
 
 (3) the Director of the Defense Information Systems Agency, or the 23 
Director’s designee; 24 
 
 (4) the Director of the Intelligence Advanced Research Projects Activity, or 25 
the Director’s designee; and 26 
 
 (5) any other federal agency that the Attorney General determines 27 
appropriate. 28 
 
 [(g) The Attorney General, or the Attorney General’s designee, shall chair the 29 
Council.] 30  4 	HOUSE BILL 376  
 
 
 
 (G) BEGINNING OCTOBER 1, 2025, AND EVERY 2 YEARS THEREAFTER , THE 1 
COUNCIL SHALL ELECT A CHAIR FROM AMONG THE MEMBERS OF THE COUNCIL. 2 
 
 SECTION 2. AND BE IT FURTHER ENACTED, That this Act shall take effect 3 
October 1, 2025.  4 
 
 
 
 
Approved: 
________________________________________________________________________________  
 Governor. 
________________________________________________________________________________  
  Speaker of the House of Delegates. 
________________________________________________________________________________  
         President of the Senate.