requiring sufficient cybersecurity protections for critical infrastructure and technology projects.

HB 1728 requires operators of critical infrastructure systems - such as water, power, emergency response, and public transportation networks serving over 10,000 people or 3,300 households in New Hampshire - to implement specific cybersecurity measures. The bill mandates strict firewall controls, phishing-resistant multi-factor authentication for remote access, and documented incident response plans to prevent foreseeable cyber risks. Operators who fail to meet this "standard of care" could face liability for harms caused by security failures. The law takes effect January 1, 2027, and has no new funding requirements.