Businesses: other; cybersecurity requirements for large-scale solar energy facilities; provide for. Amends 2008 PA 295 (MCL 460.1001 - 460.1232) by adding sec. 112a.

This bill requires operators of large-scale solar energy facilities in Michigan, defined as those with 50 megawatts or more of capacity, to implement cybersecurity measures to protect safety-critical systems. The law mandates that these facilities follow a risk-based security program aligned with national standards and report material cyber incidents to state and local authorities within 24 to 72 hours. Operators must also maintain incident response plans for coordinating with emergency responders, while specific security details remain confidential and are exempt from public disclosure. The legislation does not regulate facility siting, create new regulatory oversight, or impose additional costs on local governments, and it allows facilities to use existing staff to meet compliance requirements.