LEGAL
HB 3112
CV BERSECURITV, OPEN MEETINGS, & PUBLIC INFORMATION
Effective Immediately
• Allows governmental bodies to hold closed meetings to discuss cybersecurity measures, policies, or contracts solely intended to protect critical infrastructure facilities within their jurisdiction, including communication systems, cybersecurity systems, and related facilities, equipment, and property
• Exempts certain information from disclosure under public information, including: o Cybersecurity measures, policies, or contracts solely intended to protect critical infrastructure o Coverage limits and deductible amounts for insurance or other risk mitigation coverages acquired for the protection of information technology systems, critical infrastructure, operational technology systems, or data of a governmental body or the amount of money set aside by a governmental body to self insure against those risks o Cybersecurity incident information reported pursuant to state law o Network schematics, hardware and software configurations, or encryption information or information that identifies the detection, investigation, or response practices for suspected or confirmed cybersecurity incidents if the disclosure of such information would facilitate unauthorized access to:
■ Data or information, whether physical or virtual
■ Information technology resources, including a governmental body ' s existing or proposed information technology system
• Allows disclosure of otherwise confidential information if required by state law
• Requires the governmental body to notify the third party that owns the information or infrastructure at least 5 business days before the disclosure, or within 5 days after if immediate disclosure is required
• Requires that all confidentiality or privilege labels on the disclosed information be retained
HB4623
LIABILITY FOR SEXUAL MISCONDUCT
Effective September 1, 2025
• See page 37
79