Technology

HB 2903 prohibits Arizona state agencies from requiring banks or financial institutions to use social credit scores when evaluating loan applications. The bill directly affects lenders operating in Arizona by preventing state mandates that would compel them to consider these scores. Its key provision, added to Arizona law, explicitly states the state cannot require such use during lending decisions. This is a straightforward policy change limiting state influence on financial institutions' evaluation methods.

HB 2809 requires Arizona state agencies to implement a statewide cybersecurity system using post-quantum encryption - which protects against future quantum computing threats - for all agencies handling sensitive data like personal information, election systems, public safety records, and infrastructure data. The bill mandates that the system must meet or exceed U.S. Department of Defense’s CMMC 2.0 standards, with all vendors required to be U.S.-based, have no foreign dependencies, and avoid foreign-owned technology. The Auditor General will independently manage encryption keys, conduct regular audits, and report noncompliance to the Governor and Legislature, with agencies facing corrective plans or IT budget restrictions for failing to adhere to requirements.

HB 2409 establishes a voluntary statewide summer education program for Arizona residents through the Department of Education. It creates two core curricula: one teaching digital safety (including spotting AI-generated misinformation, understanding algorithmic bias, and protecting personal data), and another providing practical AI skills for small business owners (covering marketing tools, operational automation, and ethical use). The program, offered at public facilities, allows participating schools or colleges to award academic credit for completion. It directly affects Arizona residents and small business owners by providing accessible, hands-on AI education without mandating school curriculum changes.

HB 4009 requires Arizona's state land department to create a map identifying state lands suitable for data center development within two years of the law's effective date. The department must consult with the data center industry when developing the map, which will guide future land use planning under Section 37-331.03. The map must be submitted to the governor, Senate President, House Speaker, and Secretary of State. This procedural bill, which failed to pass in February 2026, does not change existing laws but establishes a framework for future data center siting decisions.

HB 2452 requires counties in Arizona with over 125,000 residents to include specific land use designations for data centers and small modular reactors in their comprehensive plans. The bill mandates counties to identify sufficient land locations and extents for data center construction and operation, and for larger counties (over 200,000 residents) to designate land for small modular reactors. It also adds provisions for energy planning, including incentives for renewable energy use and policies to support efficient energy consumption. This bill directly affects county planning processes by requiring new land-use considerations for data centers and nuclear energy infrastructure within existing planning frameworks.