HB 1062 Maryland House of Delegates · 2025 Regular Session

Department of the Environment - Community Water and Sewerage Systems - Cybersecurity Planning and Assessments

HB 1062 requires Maryland's Department of the Environment to coordinate cybersecurity planning for community water and sewer systems with the Department of Information Technology and the Maryland Department of Emergency Management. It mandates that water and sewer providers (both public and private) implement cybersecurity measures meeting or exceeding federal standards, report cyber incidents, and plan for service disruptions caused by attacks like ransomware. The bill also requires updating certification training for operators to include cybersecurity awareness and establishes minimum standards for these systems. These changes directly affect all community water and sewer providers in Maryland, aiming to strengthen their digital defenses against threats to critical infrastructure.
Bill status in committee 1 of 4 stages cleared
Introduction
Feb 2025
Committee Review
Floor Vote
Governor
Introduced Feb 5, 2025 Last action Apr 5, 2025
Maddy AI version diff · 1 comparison

What changed between versions

First - Department of the Environment - Community Water and Sewerage Systems - Cybersecurity Planning and Assessments Third - Department of the Environment - Community Water and Sewerage Systems - Cybersecurity Planning and Assessments · 4 edits
MODERATE
This bill amends Maryland's cybersecurity requirements for water and sewerage systems, updating definitions to include operational technology and critical infrastructure security. The changes clarify responsibilities between state departments and add new coordination requirements for protecting community water systems from cyber threats.
Scope change
The bill's scope expanded to explicitly include operational technology and critical infrastructure security measures, while maintaining the core focus on community water and sewerage systems.
DEFINITION

Added 'operational technology' and 'critical infrastructure' to the bill's definitions to broaden cybersecurity protections beyond just water systems.

REQUIREMENT

Updated reporting requirements to include cyber incidents consistent with Department of Information Technology guidance, with specific reference to ransomware and root-level compromise events.

Added new coordination requirements for the Department of Information Technology to work with emergency management and local government security officers to protect community water systems.

ENFORCEMENT

Modified the legal framework by changing the article and section references from Public Safety to General Provisions, altering the statutory basis for enforcement.

Floor votes

How they voted

No floor votes recorded yet.
Full legislative history

Actions timeline

Total actions
5
Key actions
2
Committee
3
Apr 5, 2025
Lower · Passed
Favorable with Amendments {
lower
Apr 5, 2025
Lower · Passed
Favorable with Amendments Report by Environment and Transportation
lower
Feb 5, 2025
Committee
First Reading Environment and Transportation and Health and Government Operations
lower
1 primary · 0 co-sponsors

Sponsors

Role
Legislator
Party
State
District
P
Photo of Andrea Harrison
Andrea Harrison
DDemocratic
MD
24