Businesses: other; cyber-physical security and operational technology protections for data centers; provide for. Creates new act.

This bill requires data center operators in Michigan to implement security measures that protect against both cyberattacks and physical disruptions. To achieve this, facilities must adopt a risk-based cybersecurity program aligned with national standards like the NIST framework, along with specific safety features such as redundant cooling, manual overrides, and network segmentation. Operators are also mandated to create and maintain incident response and disaster recovery plans that outline communication procedures, restoration priorities, and coordination with emergency services. The legislation applies to qualified data centers as defined by state tax acts and imposes civil fines of up to $25,000 per day for violations.