EXPLANATION: CAPITALS INDICATE MAT TER ADDED TO EXISTIN G LAW. [Brackets] indicate matter deleted from existing law. *sb0294* SENATE BILL 294 P1, S2 5lr2179 CF 5lr1418 By: Senator Feldman Introduced and read first time: January 10, 2025 Assigned to: Education, Energy, and the Environment A BILL ENTITLED AN ACT concerning 1 Maryland Cybersecurity Council – Membership – Alterations 2 FOR the purpose of altering the selection of the membership and chair of the Maryland 3 Cybersecurity Council; and generally relating to Maryland Cybersecurity Council 4 membership. 5 BY repealing and reenacting, without amendments, 6 Article – State Government 7 Section 9–2901(b) 8 Annotated Code of Maryland 9 (2021 Replacement Volume and 2024 Supplement) 10 BY repealing and reenacting, with amendments, 11 Article – State Government 12 Section 9–2901(c) and (f) 13 Annotated Code of Maryland 14 (2021 Replacement Volume and 2024 Supplement) 15 BY repealing 16 Article – State Government 17 Section 9–2901(g) 18 Annotated Code of Maryland 19 (2021 Replacement Volume and 2024 Supplement) 20 BY adding to 21 Article – State Government 22 Section 9–2901(g) 23 Annotated Code of Maryland 24 (2021 Replacement Volume and 2024 Supplement) 25 2 SENATE BILL 294 SECTION 1. BE IT ENACTED BY THE GENERAL ASSEMBLY OF MARYLAND, 1 That the Laws of Maryland read as follows: 2 Article – State Government 3 9–2901. 4 (b) There is a Maryland Cybersecurity Council. 5 (c) The Council consists of the following members: 6 (1) the Attorney General, or the Attorney General’s designee; 7 (2) the Secretary of Information Technology, or the Secretary’s designee; 8 (3) the Secretary of State Police, or the Secretary’s designee; 9 (4) the Secretary of Commerce, or the Secretary’s designee; 10 (5) the Adjutant General, or the Adjutant General’s designee; 11 (6) the State Administrator of Elections, or the State Administrator’s 12 designee; 13 (7) the Executive Director of the Governor’s Office of Homeland Security, 14 or the Executive Director’s designee; 15 (8) the Director of the Maryland Coordination and Analysis Center, or the 16 Director’s designee; 17 (9) the Secretary of Emergency Management, or the Secretary’s designee; 18 (10) the Chief Executive Officer of the Maryland Technology Development 19 Corporation, or the Chief Executive Officer’s designee; 20 (11) the Chair of the Tech Council of Maryland, or the Chair’s designee; 21 (12) the President of the Fort Meade Alliance, or the President’s designee; 22 (13) the President of the Army Alliance, or the President’s designee; and 23 (14) the following members appointed by the [Attorney General] 24 GOVERNOR: 25 (i) five representatives of cybersecurity companies located in the 26 State, with at least three representing cybersecurity companies with 50 or fewer employees; 27 SENATE BILL 294 3 (ii) four representatives from statewide or regional business 1 associations; 2 (iii) up to ten representatives from institutions of higher education 3 located in the State; 4 (iv) one representative of a crime victims organization; 5 (v) four representatives from industries that may be susceptible to 6 attacks on cybersecurity, including at least one representative of a bank, whether or not 7 State–chartered, that has a branch in the State; 8 (vi) two representatives of organizations that have expertise in 9 electronic health care records; and 10 (vii) any other stakeholder that the [Attorney General] GOVERNOR 11 determines appropriate. 12 (f) The [Attorney General] GOVERNOR also shall invite, as appropriate, the 13 following representatives of federal agencies to serve on the Council: 14 (1) the Director of the National Security Agency, or the Director’s designee; 15 (2) the Secretary of Homeland Security, or the Secretary’s designee; 16 (3) the Director of the Defense Information Systems Agency, or the 17 Director’s designee; 18 (4) the Director of the Intelligence Advanced Research Projects Activity, or 19 the Director’s designee; and 20 (5) any other federal agency that the Attorney General determines 21 appropriate. 22 [(g) The Attorney General, or the Attorney General’s designee, shall chair the 23 Council.] 24 (G) BEGINNING OCTOBER 1, 2025, AND EVERY 2 YEARS THEREAFTER , THE 25 COUNCIL SHALL ELECT A CHAIR FROM AMONG THE MEMBERS OF THE COUNCIL. 26 SECTION 2. AND BE IT FURTHER ENACTED, That this Act shall take effect 27 October 1, 2025. 28