EXPLANATION: CAPITALS INDICATE MAT TER ADDED TO EXISTIN G LAW. [Brackets] indicate matter deleted from existing law. Underlining indicates amendments to bill. Strike out indicates matter stricken from the bill by amendment or deleted from the law by amendment. *hb0376* HOUSE BILL 376 P1, S2 5lr1418 CF SB 294 By: Chair, Health and Government Operations Committee Introduced and read first time: January 16, 2025 Assigned to: Health and Government Operations Committee Report: Favorable with amendments House action: Adopted Read second time: February 22, 2025 CHAPTER ______ AN ACT concerning 1 Maryland Cybersecurity Council – Membership – Alterations 2 FOR the purpose of altering the membership, selection of the membership, and chair of the 3 Maryland Cybersecurity Council; and generally relating to Maryland Cybersecurity 4 Council membership. 5 BY repealing and reenacting, without amendments, 6 Article – State Government 7 Section 9–2901(b) 8 Annotated Code of Maryland 9 (2021 Replacement Volume and 2024 Supplement) 10 BY repealing and reenacting, with amendments, 11 Article – State Government 12 Section 9–2901(c) and (f) 13 Annotated Code of Maryland 14 (2021 Replacement Volume and 2024 Supplement) 15 BY repealing 16 Article – State Government 17 Section 9–2901(g) 18 Annotated Code of Maryland 19 (2021 Replacement Volume and 2024 Supplement) 20 BY adding to 21 2 HOUSE BILL 376 Article – State Government 1 Section 9–2901(g) 2 Annotated Code of Maryland 3 (2021 Replacement Volume and 2024 Supplement) 4 SECTION 1. BE IT ENACTED BY THE GENERAL ASSEMBLY OF MARYLAND, 5 That the Laws of Maryland read as follows: 6 Article – State Government 7 9–2901. 8 (b) There is a Maryland Cybersecurity Council. 9 (c) The Council consists of the following members: 10 (1) the Attorney General, or the Attorney General’s designee; 11 (2) the Secretary of Information Technology, or the Secretary’s designee; 12 (3) the Secretary of State Police, or the Secretary’s designee; 13 (4) the Secretary of Commerce, or the Secretary’s designee; 14 (5) the Adjutant General, or the Adjutant General’s designee; 15 (6) the State Administrator of Elections, or the State Administrator’s 16 designee; 17 (7) the Executive Director of the Governor’s Office of Homeland Security, 18 or the Executive Director’s designee; 19 (8) the Director of the Maryland Coordination and Analysis Center, or the 20 Director’s designee; 21 (9) the Secretary of Emergency Management, or the Secretary’s designee; 22 (10) the Chief Executive Officer of the Maryland Technology Development 23 Corporation, or the Chief Executive Officer’s designee; 24 (11) the Chair of the Tech Council of Maryland, or the Chair’s designee; 25 (12) THE EXECUTIVE DIRECTOR OF THE CYBERSECURITY 26 ASSOCIATION, INC., OR THE EXECUTIVE DIRECTOR’S DESIGNEE; 27 (12) (13) the President of the Fort Meade Alliance, or the President’s 28 designee; 29 HOUSE BILL 376 3 (13) (14) the President of the Army Alliance, or the President’s designee; 1 and 2 (14) (15) the following members appointed by the [Attorney General] 3 GOVERNOR: 4 (i) five representatives of cybersecurity companies located in the 5 State, with at least three representing cybersecurity companies with 50 or fewer employees; 6 (ii) four representatives from statewide or regional business 7 associations; 8 (iii) up to ten representatives from institutions of higher education 9 located in the State; 10 (iv) one representative of a crime victims organization; 11 (v) four representatives from industries that may be susceptible to 12 attacks on cybersecurity, including at least one representative of a bank, whether or not 13 State–chartered, that has a branch in the State; 14 (vi) two representatives of organizations that have expertise in 15 electronic health care records; and 16 (vii) any other stakeholder that the [Attorney General] GOVERNOR 17 determines appropriate. 18 (f) The [Attorney General] GOVERNOR also shall invite, as appropriate, the 19 following representatives of federal agencies to serve on the Council: 20 (1) the Director of the National Security Agency, or the Director’s designee; 21 (2) the Secretary of Homeland Security, or the Secretary’s designee; 22 (3) the Director of the Defense Information Systems Agency, or the 23 Director’s designee; 24 (4) the Director of the Intelligence Advanced Research Projects Activity, or 25 the Director’s designee; and 26 (5) any other federal agency that the Attorney General determines 27 appropriate. 28 [(g) The Attorney General, or the Attorney General’s designee, shall chair the 29 Council.] 30 4 HOUSE BILL 376 (G) BEGINNING OCTOBER 1, 2025, AND EVERY 2 YEARS THEREAFTER , THE 1 COUNCIL SHALL ELECT A CHAIR FROM AMONG THE MEMBERS OF THE COUNCIL. 2 SECTION 2. AND BE IT FURTHER ENACTED, That this Act shall take effect 3 October 1, 2025. 4 Approved: ________________________________________________________________________________ Governor. ________________________________________________________________________________ Speaker of the House of Delegates. ________________________________________________________________________________ President of the Senate.