Cybersecurity; limit liability for governmental and certain commercial entities that substantially comply with standards.

SB 2410 creates liability protection for Mississippi counties, municipalities, and commercial entities that substantially comply with nationally recognized cybersecurity standards. It establishes a rebuttable presumption against liability in cybersecurity incidents if entities adopt programs aligned with specific frameworks like the NIST Cybersecurity Framework 2.0, HIPAA security rules, or ISO 27000 standards. The bill requires demonstrating compliance through documentation and shifts the burden of proof in lawsuits: defendants must first show substantial compliance, then plaintiffs must prove non-compliance. This bill died in committee on February 3, 2026, and does not create new private lawsuits or affect existing causes of action.