Relating to cybersecurity; declaring an emergency.
Summary
] [ Requires the Oregon Cybersecurity Advisory Council to study the use of cybersecurity insurance for public bodies. ] Directs the Oregon Cybersecurity Advisory Council to conduct assessments to address the reasons why public bodies in this state are unable to meet cybersecurity insurance coverage requirements. Directs the advisory council to submit findings to the interim committees of the Legislative Assembly related to information management and technology not later than [ December 31, 2025 ] September 30, 2026 . Establishes the Oregon Cybersecurity Resilience Fund. Appropriates moneys in the fund to the Higher Education Coordinating Commission for distribution to the Oregon Cybersecurity Center of Excellence to assist public bodies with cybersecurity insurance requirements and cybersecurity vulnerabilities, training and incidents. Declares an emergency, effective on passage.
Bill status
in committee
1 of 4 stages cleared
Introduction
Jan 2025
Committee Review
Floor Vote
Governor
Introduced Jan 13, 2025
Last action Jun 28, 2025
Maddy AI version diff · 1 comparison
What changed between versions
Introduced
→
A-Engrossed
·
4 edits
MODERATE
The bill was amended to change the council's task from studying cybersecurity insurance use to assessing why public bodies cannot obtain coverage, and extended the report deadline from December 2025 to September 2026. The fund's purposes were expanded to include cybersecurity training and vulnerability documentation.
Scope change
The bill's scope expanded to include cybersecurity training and vulnerability documentation as fund purposes, and the council's mandate shifted from studying insurance use to assessing coverage barriers.
REQUIREMENT
Changed the council's task from studying cybersecurity insurance use to assessing why public bodies cannot meet insurance coverage requirements.
TIMELINE
Extended the report deadline from December 31, 2025 to September 30, 2026.
FISCAL
Added cybersecurity training and vulnerability documentation to the fund's approved purposes.
ENFORCEMENT
Changed the repeal date of Section 1 from January 2, 2026 to January 2, 2027.
Floor votes
How they voted
No floor votes recorded yet.
Full legislative history
Actions timeline
Total actions
7
Key actions
2
Committee
4
Jun 28, 2025
Lower · Passed
In committee upon adjournment.
lower
Apr 21, 2025
Committee
Referred to Ways and Means by prior reference.
lower
Apr 21, 2025
Lower · Passed
Recommendation: Do pass with amendments, be printed A-Engrossed, and be referred to Ways and Means by prior reference.
lower
Jan 17, 2025
Committee
Referred to Information Management and Technology with subsequent referral to Ways and Means.
lower
Jan 13, 2025
Introduced
First reading. Referred to Speaker's desk.
lower
2 primary · 0 co-sponsors
Sponsors
Ask Maddy
·
AI policy assistant
Ask Maddy about HB 3228
Scope: OR
Hi! I can help you understand HB 3228. What would you like to know?
Try one of these
i
Maddy answers using official bill text and legislative records. Always verify before sharing.
Sources cited inline