Transcript Highlights:

• Committee substitute for Senate Bill 2610 creates... ...cybersecurity safe harbor protections for small
• SB 2610 offers an approach to cybersecurity that we've seen in a couple of other states, and it really
• I am the owner of Alcon DTS, a Texas-based small business offering managed IT and cybersecurity services
• In Ohio, 76% of SMBs increased their cybersecurity spending. spending post-law, with 58% adopting NIST
• cybersecurity frameworks.

Bills: SB324, SB1978, SB2139, SB2401, SB2587, SB2610, SB2858, SB3016

Keywords: E-verify, employment verification, state contracts, immigration, labor compliance, ERCOT, Texas electric grid, interconnection, Public Utility Commission, PUC, Public convenience and necessity, electric cooperative, municipally owned utility, electric utility, transmission, generation facilities, grid reliability, Federal Energy Regulatory Commission, FERC, SERC

Transcript Highlights:

• The bill also requires licensees to investigate each cybersecurity event.
• The bill also requires licensees to investigate each cybersecurity event.
• The The bill also requires licensees to investigate each cybersecurity event.
• This bill creates cybersecurity event exemptions for loan originators. Thank you, President.
• This bill creates cybersecurity event exemptions for loan originators.

Summary: The Senate convened with prayer, the Pledge of Allegiance, and a moment of silence honoring former Senator Charlie Dean. Senators also introduced guests, including family members, church leaders, and visiting students. The chamber then moved to the special order calendar, where several bills were temporarily postponed, including measures on Citizens Property Insurance, artificial intelligence, public records, and data centers. The Senate passed a series of bills focused on consumer protection, transportation safety, health, and financial regulation. CS/HB 505 on virtual currency kiosks passed 37-0 after being substituted for SB 198 and amended to adopt Senate language aimed at limiting fraud and setting transaction controls. SB 382 on electric bicycles passed 37-0 after amendment to broaden the task force to micro-mobility devices. SB 844 on sickle cell disease continuing education passed 37-0, requiring certain health professionals to complete training on care management. SB 1014 on municipal utility service outside city limits passed 37-0, and SB 428 on the swimming lesson voucher program passed 36-0 after amendments expanding the program to ages 1 through 7 and adding drowning-prevention education for new parents. The Senate also passed CS/CS/CS/SB 540 on the Office of Financial Regulation, which creates cybersecurity program requirements for certain licensees, expands oversight of some investment advisers, and updates credit union and anti-money-laundering provisions; it passed 36-0. CS/CS/SB 1440 on public records passed 35-1 after technical amendments tied to related cybersecurity exemptions and reporting requirements. SB 1594 on veteran benefit payments to minor clients passed 36-0, directing certain benefits for foster youth toward post-secondary education or aftercare rather than agency reimbursement. At the end of the session, the Rules Chair moved to certify all passed bills to the House and retain postponed bills on the special order calendar, and the Senate adjourned until the next day.

Transcript Highlights:

• The Governor also recommends $6.2 million and 4 FTE to fully staff a 24/7 cybersecurity operations center
• , known as the CSOC, and to establish a consolidated cybersecurity data lake.
• , the Governor recommends $10 million for a competitive local government cybersecurity grant program.
• This program equips local governments with cybersecurity solutions that can share intelligence with the
• Was there a $5 million reduction in the local government cybersecurity technical assistance grants?

Summary: The committee convened with a quorum, welcomed new member Senator Ralph Massullo, and first took up confirmation of five appointees to water management district and basin board positions. Senator McLean moved favorable confirmation of Ted Everett, Jerome Pate, Michael Romano, Paul Bissfam, John Hall, and Virginia Johns, and the motion passed by roll call. The main agenda item was the Governor’s Florida First budget presentation for the environmental agencies. Kim Kramer and DEP Secretary Alexis Lambert outlined proposed environmental funding of about $5.8 billion, including more than $1.4 billion for water resources, $810 million for Everglades restoration, $408 million for water quality, $202 million for Resilient Florida, $75 million for beach renourishment, $150 million for Florida Forever, $70 million for state park infrastructure, and $221 million for hazardous waste cleanup. They also highlighted proposed funding for FWC operations, manatee care, python removal, oyster reef restoration, forestry and wildfire equipment, and citrus research and disease response. Members asked about Florida Forever funding, state park wastewater and septic needs, a cut to the Florida Wildlife Research Institute, and how beach renourishment is handled after storms. The committee then heard the general government budget presentation. Agencies highlighted included DBPR, Gaming Control, the Lottery, DMS, PERC, DFS, OIR, and Revenue. DBPR discussed funding for license processing, an animal abuse hotline, vehicle replacement, and IT recruitment; Gaming Control requested new law enforcement squads and a licensing/enforcement IT system; the Lottery emphasized marketing, retail engagement, IT, and retention funding; DMS proposed building, fleet, telecommunications, cybersecurity, and local government grant investments; PERC described workload growth after SB 256 and requested staffing, operations, and pay increases; OIR sought more staff for consumer protection and market oversight plus building renovations; DFS highlighted My Safe Florida Home funding, fire marshal and first responder support, financial investigations, and gold and silver legal tender implementation; and Revenue requested operational, IT, and fiscally constrained county funding. Members questioned DBPR about unfunded HOA fraud and condo transparency items, DMS about cybersecurity grants, and DFS about My Safe Florida Home funding levels, abandoned grants, and reduced program uptake. No further action was taken, and the committee adjourned without additional votes.

Transcript Highlights:

• The bill also requires licensees to investigate each cybersecurity event.
• The bill also requires licensees to investigate each cybersecurity event.
• The The bill also requires licensees to investigate each cybersecurity event.
• This bill creates cybersecurity event exemptions for loan originators. Thank you, President.
• This bill creates cybersecurity event exemptions for loan originators.

Summary: The Senate convened with a quorum, opening prayer, Pledge of Allegiance, and a doctor of the day announcement. Members also observed a moment of silence for former Senator Charlie Dean, with tributes offered to his service and family. Several introductions were made, including guests in the gallery and visiting students. On the special order calendar, the Senate temporarily postponed bills on Citizens Property Insurance, artificial intelligence, public records, and data centers, then took up and passed several measures. SB 198/HB 505 on virtual currency kiosks was substituted to the House bill, amended to adopt the Senate language, and passed 37-0 to address fraud, registration, transaction limits, warnings, receipts, and refunds for scam victims. SB 382 on electric bicycles passed 37-0 after amendment to broaden the task force to micro-mobility devices and collect crash data. SB 844 on sickle cell disease continuing education passed 37-0, requiring one-time board-approved training for certain licensed health professionals. SB 1014 on municipal utility service outside city limits passed 37-0, prohibiting cities from denying water or wastewater service solely because an owner refuses annexation, subject to service and funding conditions. The Senate also passed SB 428 on the swimming lesson voucher program by 36-0 after amendments expanding eligibility to ages 1 through 7 and adding postpartum drowning-prevention education and safe bathing guidance. SB 540 on the Office of Financial Regulation passed 36-0, creating cybersecurity program and oversight requirements for certain financial licensees and clarifying anti-money-laundering enforcement. SB 1440 on public records passed 35-1 after technical amendments, extending cybersecurity-related public records exemptions and reporting provisions. SB 1594 on veteran benefit payments to minor clients passed 36-0, directing benefits received on behalf of foster youth toward post-secondary education or aftercare rather than agency reimbursement. At the end of the session, the Rules Chair moved to waive rules so all bills passed that day would be immediately certified to the House and the postponed bills would remain on the special order calendar; both motions were adopted. The Senate then adjourned until the next morning for committee meetings and other business.

Transcript Highlights:

• I am the general counsel for the Office of Cybersecurity and look forward to the work of this committee
• So I'd like them to come in and talk about the do it function, obey cybersecurity, um.
• going on in cybersecurity all over the state, what they're doing.
• Um, Mark, I, I believe I, um, cybersecurity and IT are very important.
• They have an AI team, they have a cybersecurity team.

Transcript Highlights:

• We cannot let bureaucracy stand in the way of defending our nation's cybersecurity.
• At a time when the Trump administration has been cutting vital cybersecurity resources for state and
• At a time when the Trump administration has been cutting vital cybersecurity resources for state and
• CYBERSECURITY GRANT PROGRAM AT THE DEPARTMENT OF HOMELAND SECURITY WAS CREATED TO HELP CLOSE THAT GAP
• It encourages partnerships with academic and nonprofit organizations, including cybersecurity clinics

Keywords: U.S. House of Representatives Floor Proceedings on Monday, November 17, 2025, 1012, house, all

Transcript Highlights:

• Cybersecurity is also solar flares, some of the things we do.
• You're not tacking on cybersecurity later.
• The cybersecurity threat that's been... ...gigawatts of inverters total.
• And so these cybersecurity standards are in place, particularly for large power assets.
• And last is establishing processes for ongoing evaluation of emerging cybersecurity...

Keywords: 1185, senate, all

Transcript Highlights:

• But once we start mandating reporting and cybersecurity upgrades, those have real costs for them.
• One of the things we do in this bill is we do make the cybersecurity reporting mandatory.
• But, you know, one of the things we do in this bill is we do make the cybersecurity reporting.
• And I think particularly within the cybersecurity vein, we are the lifeline for so many communities when
• they find themselves in the midst of either a cybersecurity attack or, frankly, even an IT failure that

Keywords: 995, all

Summary: The hearing focused on Governor Healey and Lt. Gov. Driscoll’s Municipal Empowerment Act, with administration officials and municipal leaders broadly supporting the bill as a package of tools to help cities and towns manage rising costs, staffing shortages, and service demands. The administration highlighted procurement reforms, including raising Chapter 30B advertising thresholds, clarifying cooperative purchasing, and removing the Commbuys notice requirement; permanent authority to amortize emergency-related deficits over three years; expanded authority and enforcement for removing double poles; continued flexibility for hybrid and remote public meetings; regionalization options such as regional boards of assessors and intermunicipal agreements; cybersecurity reporting to EOTSS; and several local revenue options and other municipal finance changes. They said the bill was shaped by listening sessions with municipal officials and was intended to increase flexibility, efficiency, and stability without imposing broad mandates. Committee members asked about regionalization, cybersecurity costs, Commbuys, hybrid meetings, and double poles. Administration witnesses said cybersecurity reporting would help the state target resources and that existing Community Compact and capital grant programs, including IT and municipal fiber funding, could support local needs; they said EOTSS would absorb reporting within existing resources. On procurement, they said the Commbuys notice change would be optional and that other public notice methods would remain available. On hybrid meetings, they emphasized flexibility for different types of boards and the burdens a one-size-fits-all mandate could create for small towns and volunteer boards. On double poles, they said the bill’s main change from last session was to give utilities more time and improve the removal process while keeping enforcement mechanisms aimed at speeding removal rather than raising revenue. The Massachusetts Municipal Association, MAPC, the Pioneer Valley Planning Commission, and multiple mayors and town managers testified in support. They described the bill as a practical modernization measure that would help local governments operate more efficiently and respond to fiscal pressure. Witnesses from Northampton, Lynn, Gardner, Cambridge, Franklin, North Andover, Manchester-by-the-Sea, and Ashland praised the hybrid meeting provisions, procurement changes, regional service-sharing, and emergency deficit amortization. Several also urged adoption of local revenue tools, including meals and lodging tax options and other local fees, as ways to preserve services and staffing. No votes were taken during the hearing.

Transcript Highlights:

• The bill requires that the The bill requires that the well-established energy emergency and cybersecurity
• It ensures that the Department of Energy's emergency and cybersecurity responsibilities are led by a
• By simplifying the funding process, we can get dollars from the agency into the hands of cybersecurity
• While larger utilities may have more resources to invest in cybersecurity, the smaller utilities and
• By reauthorizing the rural and municipal utility advanced cybersecurity grant and technical assistance

Keywords: U.S. House of Representatives Floor Proceedings on Monday, June 29, 2026, 1012, house, all

Transcript Highlights:

• We perform this mission through four statutory areas: cybersecurity, infrastructure, governance, and
• Coming from a cybersecurity background, we take cybersecurity very seriously and are responsible for
• And running through all of it, of course, is cybersecurity. We integrate it in everything we do.
• Because one of the things that you highlighted is the cybersecurity that you're providing for the state
• Because one of the things that you highlighted is the cybersecurity that you're providing for the state

Keywords: Technology and Science, Joint Commission on, 976, house, all

Summary: The commission opened its first 2026 meeting by calling the roll, confirming a quorum, welcoming new members, and reelecting Delegate Cliff Hayes as chair and Senator Barbara Favola as vice chair. Members also adopted the commission’s annual virtual participation policy, which allows remote participation but does not permit virtual attendance to count toward a quorum. The commission then heard an introductory presentation from VITA CIO Mike Watson, who outlined the agency’s mission and structure, including cybersecurity, infrastructure, governance, and procurement. He emphasized VITA’s role in protecting state systems, managing statewide technology contracts, overseeing major contract recompetes, and developing an approach to artificial intelligence that keeps a human in the loop. Members asked about AI executive orders, cybersecurity support for localities, and what the General Assembly could do to help VITA serve state and local partners; Watson stressed the need for clear policy direction, process modernization, and guardrails that allow innovation without reckless deployment. Executive Director Jody Coon presented the 2026 work plan, including a schedule of meetings, a broader focus on science topics, and planned presentations from Virginia Sea Grant, the Hampton Roads Sanitation District, and a health-tech company. She reviewed prior commission recommendations, noted that several AI-related bills were not introduced in 2026 because of the federal executive order, and outlined this year’s studies and deliverables, including workgroups on .gov domains and caller ID accuracy, a study on age verification, a brief on companion chatbots, and a major study on independent verification organizations. The commission discussed whether the AI study would duplicate work by another legislative body and agreed to proceed with coordination and to include best practices and other-state comparisons in resource briefs; the work plan was then adopted. Dr. Kira Allman and Steve Wimmer provided presentations on federal and state AI policy. They described recent White House executive actions, including an executive order and national framework that seek to preempt burdensome state AI laws, and explained how those actions have chilled some state legislation, especially where BEAD broadband funding could be affected. They also reviewed how different states have responded—some pulling back, others moving ahead with AI bills on chatbots, deepfakes, transparency, and child protections—and suggested Virginia focus on carve-outs, state-specific applicability, regulatory sandboxes, and coordination with other states. Members debated the balance between innovation and guardrails, the risks of federal retaliation, and the need to protect children and address AI harms while avoiding unnecessary conflict with federal policy.

Transcript Highlights:

• So, as part of our work to fortify cybersecurity, SIA is focused on strengthening our domestic supply
• You're not tacking on cybersecurity later.
• level initiatives with federal cybersecurity 3861 frameworks to ensure that there's consistency and
• These are the residential, systems. 4152 underwriters lab has a cybersecurity certification standard
• The cybersecurity threat landscape is constantly evolving.

Summary: The Senate Committee on Business and Commerce held its first interim hearing on securing critical infrastructure and supply chain integrity, with a focus on Texas’s electric grid and the Lone Star Infrastructure Protection Act. The chair also highlighted Texas’s relatively low electricity prices and welcomed new committee members. ERCOT, the Public Utility Commission (PUC), and the Attorney General’s office were invited to explain how the state screens market participants and grid equipment for ties to China, Russia, Iran, and North Korea, and how the agencies respond to noncompliance. ERCOT testified that it has implemented the requirements of three related Senate bills by requiring attestations on corporate affiliations and on critical grid equipment and services. ERCOT said it has processed thousands of attestations, used additional requests for information and third-party verification tools such as Dun & Bradstreet, and terminated nonresponsive market participants. ERCOT also said it has not seen a case requiring direct Attorney General involvement, but it does refer matters to the PUC when needed. The PUC said it can investigate suspected violations and impose penalties of up to $1 million per violation per day, and that most investigations into late or missing attestations have been resolved through compliance, market exit, or removal by ERCOT. The Attorney General’s office said its role is currently limited to audits and court involvement, and that it lacks broad independent investigatory authority under the act. Members pressed the panel on whether the current system is too reliant on self-reporting and whether it adequately addresses indirect foreign influence, especially through supply chains for batteries, inverters, transformers, and other equipment with routable connectivity. ERCOT acknowledged that the current attestation process has gaps and said it plans to refine definitions of critical grid equipment and grid services, improve information requests, and continue stakeholder rulemaking. The panel also discussed possible legislative changes, including tying prohibitions to the Department of Defense Section 1260H list and the Texas Prohibited Technologies list, clarifying warranty and service access, and expanding the statute to cover grid services more directly. Several senators raised concerns about cost, reliability, and the extent to which foreign-sourced components remain embedded in Texas infrastructure, while others suggested incentives for domestic manufacturing and stronger verification tools, including possible work with national labs such as Sandia.

Transcript Highlights:

• This, cybersecurity services, so we coordinate some of those items across higher education, as well as
• I would say modernization of technologies in general, quantum computing, cybersecurity.
• So I think we're going to the next one, the cybersecurity incidents.
• So in addition to providing some of these tool sets, one of the things we have done is cybersecurity
• We certainly have had some significant cybersecurity incidents across North Dakota since then.

Summary: The committee received several informational reports from NDIT and DPI. Justin Data reviewed the quarterly major IT project portfolio, noting the portfolio was slightly under budget and behind schedule overall, with three red schedule items: Bed Management System and Vital Records were essentially complete and being closed out, and the Roadway Capital Planning Project was delayed by vendor bug fixes after testing. He also summarized recent project startups and closeouts, including the Victim Notification System, Medicaid data exchange, Highway Patrol’s motor carrier permit system, and several completed HHS and RIMS projects. Members asked for follow-up on ADA compliance work, the public-facing RIO website, and the state’s mainframe retirement timeline, and staff agreed to provide updates later. Craig Falkley reported on coordination of services with political subdivisions and higher education, including StageNet, cybersecurity, radio/911 services, and PeopleSoft coordination. He also explained distributed ledger technology as a tool for transparency and fraud prevention, but said it is not widely used in state government and suggested the report be modernized to focus more broadly on emerging technologies such as AI and cybersecurity. The committee generally agreed that the topic should be updated. Chris Gurgan presented the mandatory cybersecurity incident reporting program created by HB 1314, explaining how agencies and political subdivisions report incidents through NDIT’s website or service desk. He said 77 incidents had been reported since 2021, 47 met the statutory definition, and most were phishing-related; most reported incidents were resolved, with one recent ransomware matter still open. He also reviewed notable incidents since the last report, including the PowerSchool compromise, a SimpleHelp intrusion at a school district, a court intrusion, a WSUS vulnerability, a business email compromise, and a recent ransomware incident involving a non-state critical infrastructure entity. Members asked about recovery of stolen funds, early warning signs, smishing, training, MFA, conditional access, and cybersecurity maturity assessments; Gurgan said the state uses MFA and conditional access, provides awareness training to state employees, and would return with more information on maturity assessments. Tony Ambrose then updated the committee on the K-12 student information system bridge project. He said district implementation of Infinite Campus had begun statewide, but the data migration vendor originally selected was terminated for poor performance and replaced by Aurora Educational Technology, which had experience with similar statewide migrations. He also said DPI is migrating special education data from Tynet into Infinite Campus, and that some SLDS-based tools such as e-transcripts and Choice Ready may not function exactly as they do now at July 1, requiring interim or alternative solutions. Members raised concerns about summer school disruptions, the timing of the cutover, and whether the new system would support existing reporting and transcript functions; DPI said it was working on identity, authentication, data-sharing agreements, and post-go-live integrations, and would continue to refine the plan beyond June 30.

Transcript Highlights:

• We have offices of cybersecurity, which is like...
• The Office of Cybersecurity was created by legislation back in July of 2023.
• With our new leadership team, working with the Office of Cybersecurity and all our 206 employees at the
• How is that secured through your cybersecurity? How do you isolate that piece of information?
• Yes, we do have a very active annual cybersecurity program.

Transcript Highlights:

• We are going to be moving all the cybersecurity down to the different agencies where they have control
• Everything in our home it with your life is up for grabs, integrating cybersecurity.
• Cybersecurity is key. And that's why we have a chief security officer.
• But also we have the cybersecurity consultant in each different silo.
• So we want to make sure we're going down to the ground level when it talks about cybersecurity major

Keywords: 999, senate, all

Transcript Highlights:

• Again, I work on issues related to cybersecurity, private. of this committee.
• Everything from enhanced cybersecurity, the previous speaker talked about it.
• cybersecurity awareness training quarterly.
• Cybersecurity awareness training quarterly.
• So that's part of our cybersecurity education strategy.

Keywords: 908, all

Transcript Highlights:

• This program is not necessarily software; it's about being able to document procedures for cybersecurity
• This bill has a lot of cybersecurity requirements for money service... organizations, mortgage lenders
• , credit unions, and banks, and cybersecurity is incredibly important.
• just because there are more requirements on a piece of paper doesn't always result in meaningful cybersecurity
• protections, and sometimes can run the risk of being a regulatory burden without providing meaningful cybersecurity

Transcript Highlights:

• The first thing is it would require cybersecurity standards for... It does two main things.
• The first thing is it would require cybersecurity standards for local education agencies.
• Training on cybersecurity for staff.
• So that's the two main components of the cybersecurity bill. And coordinate with UETN.
• So that's the two main components of the cybersecurity bill. Okay, thank you.

Keywords: 985, all

Transcript Highlights:

• I think, Vice Chair, there's a difference between enterprise cybersecurity that this team works on and
• So the employees that we're talking about here work on enterprise cybersecurity, enterprise data team
• cybersecurity, enterprise data team for the entire state of Florida.
• So I'm going to show my limited knowledge on cybersecurity and data collection.
• Cybersecurity is a huge issue.

Summary: The subcommittee met to review agency travel, budget reduction exercises, and member reports from agency meetings. Early discussion focused on the Department of Management Services (DMS), where members questioned the cost of travel for four out-of-state data/cyber staff and the secretary’s absence. DMS defended the hires as highly specialized enterprise cybersecurity and data personnel, said the positions were lawfully paid and posted, and explained that the staff work on statewide data cataloging and cyber risk reduction rather than agency-by-agency systems. Members also raised concerns about fleet inventory discrepancies and requested follow-up information on hiring, travel, and data inventory timelines. The chair said she would consider travel guardrails and possible reductions, and noted that DMS, the Lottery, and the Florida Commission on Human Relations did not meet the requested reduction target, while the Public Employee Relations Commission did not submit reductions. The committee then heard from the Florida Lottery about the secretary’s trip to Paris for the World Lottery Convention. Lottery staff said the trip was reimbursed through the multi-state lottery organization and was intended to share best practices and improve operations, though members questioned the value of the travel and requested reimbursement records and the trip agenda. The subcommittee also reviewed agency reduction exercises from several agencies. The Department of Revenue exceeded its target and was praised for frugality; DFS, the Florida Gaming Control Commission, the Office of Financial Regulation, the Office of Insurance Regulation, the Public Service Commission, the Division of Administrative Hearings, and the Department of Business and Professional Regulation each described how they met or approached their reduction goals, often through vacancies, reversions, or expense cuts. OIR warned that further reductions could hurt insurance regulation capacity, while OFR and PSC said their reductions were based on historical reversions and lower post-COVID travel or vacancy levels. Members then reported back on agency meetings. DMS members raised fleet tracking, real property audits, salary studies, and health plan savings ideas, and asked for follow-up on the Florida PALM project, cybersecurity grants, and state IT modernization. DFS members said the agency was efficient and that its Palm-related work and insurance consumer programs were important. Lottery members emphasized the agency’s revenue generation for education and its low administrative overhead. Gaming Control members highlighted storage costs for seized gaming equipment and suggested technology-based alternatives. PERC members said a union-related law had doubled their workload and asked for more staffing and possible AI assistance. OIR members stressed the need for a Tampa satellite office and more resources to recruit and retain specialized staff. The chair closed by saying the committee would continue reviewing travel, staffing, and reductions with an eye toward taxpayer value and transparency.

Transcript Highlights:

• Third, we'll have a discussion about work that's underway on a revised cybersecurity incident notification
• Third, we'll have a discussion about work that's underway on a revised cybersecurity incident notification
• Third, we'll have a discussion about work that's underway on a revised cybersecurity incident notification
• On your behalf, the co-chairs directed me to work with the Oregon Cybersecurity Advisory Council.
• The Oregon Cybersecurity Center of Excellence is a perfect case in point.

Keywords: 907, all

Summary: The committee held a series of informational briefings on information management and technology issues. It first heard from ACLU representatives on data privacy, who argued that Oregon should strengthen protections against private data brokers, government purchases of personal data, reverse warrants, automatic license plate readers, and local police surveillance. They urged data minimization, limits on data sales and retention, and broader transparency and accountability measures. Members asked about practical uses of license plate readers, state sales of data, and how Oregon’s approach compares with other states; the presenters said similar proposals have been adopted elsewhere, including data minimization in Maryland and a state version of the Fourth Amendment Is Not for Sale Act in Montana. The committee then received a detailed update from the Department of Administrative Services and Enterprise Information Services on licensing system modernization for 14 boards and commissions with the most immediate need. DAS said it is seeking a shared procurement approach through an RFP that would create either one scalable system or two tiers of systems, depending on agency needs and security requirements, with contracts expected by September. Committee members emphasized the need for a more unified, user-friendly statewide login and service experience for businesses and residents, and raised concerns about small agencies “figuring it out on their own” without sufficient cybersecurity or technical expertise. EIS said it is overseeing the investment review, security and architecture review, and future implementation planning, and noted that multiple agency requests may still come back to the legislature in the next session. The committee also discussed a revised cybersecurity incident notification concept. Staff explained that the earlier bill had raised stakeholder concerns, so the co-chairs directed further interim work with the Oregon Cybersecurity Advisory Council and other local government and K-12 stakeholders. The goal is a narrower, voluntary “911-style” notification process that would let public bodies alert peers and potentially receive assistance after cyber incidents; a temporary voluntary process is being tested now, with a work group developing language for possible 2027 consideration. Finally, the committee heard updates from the new state chief data officer on data governance, data sharing, geospatial work, and the state transparency website, followed by a briefing on data centers from NCSL and the Technology Association of Oregon. The data officer described efforts to expand data inventories, data governance plans, data literacy, and interagency sharing, along with statewide aerial imagery, geospatial standards, and the open data portal. The data center discussion focused on national and state trends, including rapid growth in data centers, rising electricity and water demand, and legislative responses such as new rate classes, reporting requirements, and cost-allocation rules to protect ratepayers. No votes were taken; the meeting was informational only.

Transcript Highlights:

• Uh, these developments raise questions about the extent to which existing cybersecurity resources and
• But only a quarter use cybersecurity tools.
• A single cybersecurity attack could mean... single cybersecurity attack could mean the difference between
• HR 8880 puts us on a path to meaningful reforms in federal small business cybersecurity assistance.
• Breznahan for their dedication to Main Street cybersecurity and urge my Street cybersecurity and urge

Keywords: U.S. House of Representatives Floor Proceedings on Tuesday, June 23, 2026, 1012, house, all