A bill for an act prohibiting the state or a political subdivision of the state from expending revenue received from taxpayers for payment to persons responsible for ransomware attacks, and including effective date provisions.(Formerly HSB 153.)
Impact
This bill establishes a framework requiring immediate reporting of ransomware attacks to the office of the chief information officer. It stipulates that while taxpayer funds cannot be expended to directly pay off ransomware demands, under emergency circumstances defined by the department of homeland security and emergency management, exceptions may allow for such payments with appropriate notification. This introduces a nuanced approach to crisis management, emphasizing accountability while providing mechanisms to respond effectively in critical situations.
Summary
House File 554 aims to address the growing threat of ransomware attacks by prohibiting the state and its political subdivisions from using taxpayer revenues to make payments to individuals or entities involved in such attacks. The bill seeks to enhance financial accountability and encourage preventive measures against ransomware threats. By enacting this legislation, the state intends to deter payment demands from malicious actors, thus limiting the potential financial losses to public funds and ensuring responsible management of taxpayer money in the face of cybersecurity risks.
Contention
Notable points of contention surrounding HF554 include the tension between maintaining strict prohibitions against ransom payments and the need for flexibility in emergency scenarios. Critics may argue that the inability to use taxpayer dollars for ransom payments, even in life-threatening situations involving critical infrastructure, could leave entities vulnerable and without sufficient recourse. The legislative intent highlights the necessity for well-tested cybersecurity strategies, prompting discussions about what constitutes an effective and flexible policy that balances security, fiscal responsibility, and emergency responsiveness.
Related
A bill for an act prohibiting the state or a political subdivision of the state from expending revenue received from taxpayers for payment to persons responsible for ransomware attacks, and including effective date provisions.(See HF 554.)
A bill for an act prohibiting political subdivisions from using certain moneys to hire lobbyists or pay instrumentalities, and providing penalties.(Formerly SSB 1042.)
A bill for an act relating to state income tax withholdings on winnings from sports wagering, and including effective date provisions.(Formerly HSB 91.)
A bill for an act requiring reporting by regents institutions of funding from certain foreign sources and including effective date provisions.(Formerly HSB 54.)
A bill for an act prohibiting the state or a political subdivision of the state from entering into contracts with, or providing tax incentives or specified benefits to, certain companies that censor online content, and including effective date and applicability provisions.
A bill for an act prohibiting public entities from engaging in certain activities relating to diversity, equity, and inclusion, creating a private cause of action, and including effective date provisions. (Formerly HSB 155.) Effective date: 05/27/2025, 07/01/2025.
A bill for an act relating to state income tax withholdings on winnings from sports wagering, and including effective date provisions. (Formerly SSB 1152.) Effective date: 01/01/2026.
A bill for an act prohibiting warrant resolution clinics, including enforcement mechanisms, providing penalties, and including effective date provisions. (Formerly HSB 780.)
A bill for an act relating to paid parental leave for state employees, and including effective date provisions. (Formerly HSB 579.) Effective date: 04/30/2026.
Relating to the reporting of certain security incidents by public water systems to the Texas Commission on Environmental Quality and the Department of Information Resources.