CHAPTER 190
HB 1277 - FINAL VERSION
04/21/2022 1421s
2022 SESSION
22-2820
11/10
HOUSE BILL 1277
AN ACT relative to the reporting of cybersecurity incidents.
SPONSORS: Rep. Somssich, Rock. 27; Rep. Meuse, Rock. 29; Rep. Hamblet, Rock. 31; Rep. Ward, Rock. 28
COMMITTEE: Municipal and County Government
─────────────────────────────────────────────────────────────────
ANALYSIS
This bill defines "cybersecurity incident" and requires that political subdivisions report such incidents to the department of information technology.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Explanation: Matter added to current law appears in bold italics.
Matter removed from current law appears [in brackets and struckthrough.]
Matter which is either (a) all new or (b) repealed and reenacted appears in regular type.
04/21/2022 1421s 22-2820
11/10
STATE OF NEW HAMPSHIRE
In the Year of Our Lord Two Thousand Twenty Two
AN ACT relative to the reporting of cybersecurity incidents.
Be it Enacted by the Senate and House of Representatives in General Court convened:
190:1 New Section; Duties of Towns; Cybersecurity. Amend RSA 31 by inserting after section 103-a the following new section:
31:103-b Cybersecurity. The governing body, or chief administrative officer or designee of any political subdivision, who knows of or suspects a cybersecurity incident within the political subdivision's information systems, or within any vendor acting as an agent of the political subdivision, shall immediately report such incident, upon discovery, and shall disclose all known information and interactions to the New Hampshire cyber integration center of the department of information technology. For purposes of this section, "cybersecurity incident" means an occurrence that actually or potentially jeopardizes the confidentiality, integrity, or availability of an information system or the information processes, stores, or transmits, of that constitutes a violation or imminent threat of violation of security policies, security procedures, or acceptable use policies.
190:2 Effective Date. This act shall take effect 60 days after its passage.
Approved: June 17, 2022
Effective Date: August 16, 2022
| Date | Body | Type |
|---|---|---|
| Jan. 13, 2022 | House | Hearing |
| Jan. 24, 2022 | House | Exec Session |
| House | Floor Vote | |
| March 21, 2022 | Senate | Hearing |
| April 21, 2022 | Senate | Floor Vote |
June 22, 2022: Signed by Governor Sununu 06/17/2022; Chapter 190; 08/16/2022 HJ 14
June 9, 2022: Enrolled (in recess of) 05/26/2022
June 9, 2022: Enrolled Adopted, VV, (In recess 05/26/2022); SJ 13
May 13, 2022: House Concurs with Senate Amendment (Rep. Dolan): MA VV 05/12/2022 HJ 13
April 21, 2022: Ought to Pass with Amendment 2022-1421s, MA, VV; OT3rdg; 04/21/2022; SJ 9
April 21, 2022: Committee Amendment # 2022-1421s, AA, VV; 04/21/2022; SJ 9
April 12, 2022: Committee Report: Ought to Pass with Amendment # 2022-1421s, 04/21/2022; Vote 5-0; CC; SC 16
March 21, 2022: Hearing: 03/21/2022, Room 100, SH, 01:45 pm; SC 12
March 15, 2022: Introduced 02/24/2022 and Referred to Election Law and Municipal Affairs; SJ 5
March 11, 2022: Ought to Pass: MA VV 03/10/2022 HJ 5
Feb. 19, 2022: Committee Report: Ought to Pass (Vote 19-0; CC)
Jan. 24, 2022: Executive Session: 01/24/2022 10:00 a.m. LOB301-303
Jan. 13, 2022: Public Hearing: 01/13/2022 1:30 p.m. LOB301-303
Nov. 19, 2021: Introduced 01/05/2022 and referred to Municipal and County Government