SB 410, the Montana Genomic Security Act, prohibits medical and research facilities in Montana from using genetic sequencers or sequencing software produced by companies based in nations designated as "foreign adversaries" under federal regulations (e.g., China, Russia). Facilities must replace such technology, store all genetic data within the U.S., and obtain written consent for remote data access outside Montana. The bill requires annual compliance certifications to the Attorney General and imposes $10,000 fines per violation for noncompliance with data storage or technology bans. It directly affects hospitals, research labs, and health facilities receiving state funding or conducting genetic research.
HB 722 requires public agencies in Montana to retain all electronic communications (like emails) from work accounts for at least one year after a public employee leaves their position. This applies to state and local government employees, excluding communications from constitutional officers (e.g., governors, judges). The bill mandates that agencies cannot delete these records before the one-year period ends, and disposal requires approval from oversight committees. It also updates record-keeping rules to formalize this retention period for work-related electronic communications.
HB 488 would allow Montana voters with disabilities to return their voted ballots electronically for federal elections using a secure, encrypted system approved by the Secretary of State. To use this option, voters must request an electronic ballot in writing, by email, or in person, and return the completed ballot with a signed affirmation by 8 p.m. on election day. The Secretary of State would establish security and encryption standards for the system, and the bill appropriates $10,000 to develop the technology. This change would apply only to federal primary and general elections beginning in 2026.
HB 662 revises the Montana Driver Privacy Protection Act to strengthen privacy protections for individuals' motor vehicle records. The bill requires that "express consent" for disclosing personal information must be obtained on a specific form prescribed by the Department of Motor Vehicles. It also allows individuals to file individual or class action lawsuits against "requesters" who misuse this disclosed information. These lawsuits can seek punitive damages, costs, and reasonable attorney fees, and the department would be required to maintain a list of all requesters.
HB 255 revises Montana's data privacy rules for K-12 student records held by third-party educational technology providers (like apps or cloud services). It requires school districts to include specific privacy protections in contracts with these vendors, such as prohibiting the use of student data for targeted advertising, ensuring data security, and guaranteeing students or parents can access or correct their records. The bill also allows schools to adopt pre-approved model contracts from privacy-focused consortia to simplify compliance. These changes directly affect school districts, educational tech companies, and students whose data is stored or managed through digital platforms.
HB 925, the "Social Media Youth Protection Act," requires social media companies operating in Montana to implement systems that accurately identify minors (with 95% accuracy) and provide parental consent for data privacy settings. It mandates supervisory tools for minor account holders and restricts algorithmically curated services that use engagement-driven features like autoplay or endless scrolling. The bill directly affects social media companies and minors under 18, aiming to reduce excessive use linked to mental health risks by giving parents control over data and content exposure. Key provisions include age-assurance systems, parental consent for data privacy, and penalties for non-compliance, with definitions clarifying terms like "excessive use" and "algorithmically curated services."
HB 514 revises Montana's privacy in communications laws, specifically targeting the non-consensual use of sexually explicit images. The bill makes it an offense to publish, distribute, or disclose real or "digitally fabricated" sexually explicit images of an identifiable person without their consent, especially with intent to harm or extort. It also criminalizes possessing and threatening to disclose such images to obtain money or valuables. "Digitally fabricated" is defined as media created using technical means, like artificial intelligence, to falsely depict an individual engaging in sexual conduct. Penalties for these offenses range from a misdemeanor for a first conviction to a felony for subsequent convictions.
HB 10 appropriates over $39 million for various information technology (IT) capital projects across multiple state agencies for the biennium ending June 30, 2027. It transfers funds from the general fund to the Long-Range Information Technology Program (LRITP) account to support these initiatives. The bill funds projects such as cybersecurity enhancements, system modernizations, and new business applications for departments like Administration, Corrections, and Public Health and Human Services. All funded projects require approval from the chief information officer and budget director for their design, implementation, and data security plans, emphasizing safeguards against unauthorized access and promoting data sharing among agencies.
HB 513 establishes property rights for individuals in their name, voice, and likeness, making these rights transferable and descendible for a period after their death. The bill prohibits the unauthorized creation, distribution, or use of digital voice replicas or digital depictions of an individual. Those who violate these provisions may face significant financial penalties, including actual damages and profits from the unauthorized use. However, the bill includes exceptions for uses like news reporting, commentary, criticism, scholarship, satire, or parody.
HB 392, known as the "Child Digital Protection Act," revises laws concerning profitable family video content featuring minor children. It requires content creators who meet specific profit and content thresholds to contribute a percentage of their gross earnings into a trust for the minor child, accessible once the child reaches 18 years of age. Additionally, the bill grants individuals who were featured as minors in such content the right to request the permanent deletion of those video segments from online platforms upon reaching the age of majority.