H1183: Cybersecurity Incident Liability

Legislative Summary

Provides county, municipality, other political subdivision of state, covered entity, or third-party agent that complies with certain requirements is not liable in connection with cybersecurity incident; requires covered entities & third-party agents to implement revised frameworks, standards, laws, or regulations within specified time period; provides private cause of action is not established; provides that fact that specified defendant could have obtained liability shield or presumption against liability is not admissible as evidence of negligence, does not constitute negligence per se, & cannot be used as evidence of fault; specifies defendant in certain actions has certain burden of proof.