H0473: Cybersecurity Incident Liability

Legislative Summary

Provides county, municipality, other political subdivision of state, covered entity, or third-party agent that complies with certain requirements is not liable in connection with cybersecurity incident; requires covered entities & third-party agents to adopt revised frameworks, standards, laws, or regulations within specified time period; provides private cause of action is not established; provides certain failures are not evidence of negligence & do not constitute negligence per se; specifies defendant in certain actions has certain burden of proof.