Maryland 2025 2025 Regular Session

Maryland Senate Bill SB294 Introduced / Bill

Filed 01/10/2025

                     
 
EXPLANATION: CAPITALS INDICATE MAT TER ADDED TO EXISTIN G LAW. 
        [Brackets] indicate matter deleted from existing law. 
          *sb0294*  
  
SENATE BILL 294 
P1, S2   	5lr2179 
    	CF 5lr1418 
By: Senator Feldman 
Introduced and read first time: January 10, 2025 
Assigned to: Education, Energy, and the Environment 
 
A BILL ENTITLED 
 
AN ACT concerning 1 
 
Maryland Cybersecurity Council – Membership – Alterations 2 
 
FOR the purpose of altering the selection of the membership and chair of the Maryland 3 
Cybersecurity Council; and generally relating to Maryland Cybersecurity Council 4 
membership. 5 
 
BY repealing and reenacting, without amendments, 6 
 Article – State Government 7 
Section 9–2901(b) 8 
 Annotated Code of Maryland 9 
 (2021 Replacement Volume and 2024 Supplement) 10 
 
BY repealing and reenacting, with amendments, 11 
 Article – State Government 12 
Section 9–2901(c) and (f) 13 
Annotated Code of Maryland 14 
 (2021 Replacement Volume and 2024 Supplement) 15 
 
BY repealing 16 
 Article – State Government 17 
Section 9–2901(g) 18 
Annotated Code of Maryland 19 
 (2021 Replacement Volume and 2024 Supplement) 20 
 
BY adding to 21 
 Article – State Government 22 
Section 9–2901(g) 23 
Annotated Code of Maryland 24 
 (2021 Replacement Volume and 2024 Supplement) 25 
   2 	SENATE BILL 294  
 
 
 SECTION 1. BE IT ENACTED BY THE GENERAL ASSEMBLY OF MARYLAND, 1 
That the Laws of Maryland read as follows: 2 
 
Article – State Government 3 
 
9–2901. 4 
 
 (b) There is a Maryland Cybersecurity Council. 5 
 
 (c) The Council consists of the following members: 6 
 
 (1) the Attorney General, or the Attorney General’s designee; 7 
 
 (2) the Secretary of Information Technology, or the Secretary’s designee; 8 
 
 (3) the Secretary of State Police, or the Secretary’s designee; 9 
 
 (4) the Secretary of Commerce, or the Secretary’s designee; 10 
 
 (5) the Adjutant General, or the Adjutant General’s designee; 11 
 
 (6) the State Administrator of Elections, or the State Administrator’s 12 
designee; 13 
 
 (7) the Executive Director of the Governor’s Office of Homeland Security, 14 
or the Executive Director’s designee; 15 
 
 (8) the Director of the Maryland Coordination and Analysis Center, or the 16 
Director’s designee; 17 
 
 (9) the Secretary of Emergency Management, or the Secretary’s designee; 18 
 
 (10) the Chief Executive Officer of the Maryland Technology Development 19 
Corporation, or the Chief Executive Officer’s designee; 20 
 
 (11) the Chair of the Tech Council of Maryland, or the Chair’s designee; 21 
 
 (12) the President of the Fort Meade Alliance, or the President’s designee; 22 
 
 (13) the President of the Army Alliance, or the President’s designee; and 23 
 
 (14) the following members appointed by the [Attorney General] 24 
GOVERNOR: 25 
 
 (i) five representatives of cybersecurity companies located in the 26 
State, with at least three representing cybersecurity companies with 50 or fewer employees; 27 
   	SENATE BILL 294 	3 
 
 
 (ii) four representatives from statewide or regional business 1 
associations; 2 
 
 (iii) up to ten representatives from institutions of higher education 3 
located in the State; 4 
 
 (iv) one representative of a crime victims organization; 5 
 
 (v) four representatives from industries that may be susceptible to 6 
attacks on cybersecurity, including at least one representative of a bank, whether or not 7 
State–chartered, that has a branch in the State; 8 
 
 (vi) two representatives of organizations that have expertise in 9 
electronic health care records; and 10 
 
 (vii) any other stakeholder that the [Attorney General] GOVERNOR 11 
determines appropriate. 12 
 
 (f) The [Attorney General] GOVERNOR also shall invite, as appropriate, the 13 
following representatives of federal agencies to serve on the Council: 14 
 
 (1) the Director of the National Security Agency, or the Director’s designee; 15 
 
 (2) the Secretary of Homeland Security, or the Secretary’s designee; 16 
 
 (3) the Director of the Defense Information Systems Agency, or the 17 
Director’s designee; 18 
 
 (4) the Director of the Intelligence Advanced Research Projects Activity, or 19 
the Director’s designee; and 20 
 
 (5) any other federal agency that the Attorney General determines 21 
appropriate. 22 
 
 [(g) The Attorney General, or the Attorney General’s designee, shall chair the 23 
Council.] 24 
 
 (G) BEGINNING OCTOBER 1, 2025, AND EVERY 2 YEARS THEREAFTER , THE 25 
COUNCIL SHALL ELECT A CHAIR FROM AMONG THE MEMBERS OF THE COUNCIL. 26 
 
 SECTION 2. AND BE IT FURTHER ENACTED, That this Act shall take effect 27 
October 1, 2025. 28