HB 150 Texas House · 89th Legislature (2025)

Relating to the establishment of the Texas Cyber Command and the transfer to it of certain powers and duties of the Department of Information Resources.

HB 150 establishes the Texas Cyber Command as a new state agency under the Government Code, effective September 1, 2025. The bill transfers specific cybersecurity responsibilities from the Department of Information Resources to this new command, focusing on protecting critical infrastructure such as energy systems, water facilities, health care, and transportation networks. The command will handle cybersecurity incidents - including ransomware attacks and system breaches - by providing services to covered entities like local governments and private operators of critical infrastructure. This creates a dedicated state-level entity for coordinating cybersecurity efforts across vital systems, replacing the previous structure managed by the Department of Information Resources.

Issues: ✓ Energy ✓ Technology

Bill status signed all 5 stages cleared

Introduction

Mar 2025

Committee Review

May 2025

House Passage

May 2025

Senate Passage

Jun 2025

Signed into Law

Jun 2025

Introduced Mar 11, 2025 Signed Jun 2, 2025

Maddy AI version diff · 2 comparisons

What changed between versions

Engrossed → Enrolled · 7 edits · Jun 2, 2025

MODERATE

This bill establishes the Texas Cyber Command as a state agency within the University of Texas System, replacing its previous status as a component institution. The enrolled version significantly expands the Command's authority, duties, and operational structure compared to the earlier version. Key changes include redefining the Command's organizational status, expanding its responsibilities to include statewide cybersecurity leadership, and adding new provisions for emergency purchasing and training requirements.

Scope change

The bill's scope expanded from establishing the Texas Cyber Command as a University of Texas System component institution to establishing it as a state agency with broader authority and responsibilities across state government operations.

SCOPE

Changed the Texas Cyber Command from a University of Texas System component institution to a state agency, expanding its authority and operational independence.

TIMELINE

Modified the Chief's appointment term from 'at the pleasure of the governor' to a fixed two-year term expiring February 1 of each odd-numbered year.

REQUIREMENT

Added new requirements for cybersecurity training, including mandatory training for all state agency information resources employees and annual certification of training programs.

Added new provisions for emergency purchasing in response to cybersecurity incidents, allowing the Command to bypass standard procurement procedures during emergencies.

Expanded the Command's duties to include developing cybersecurity best practices, operating a threat intelligence center, and administering a digital forensics laboratory.

Added new restrictions prohibiting non-citizens from being members, employees, contractors, or volunteers of the Texas Cyber Command.

Modified training requirements to include periodic audits and verification of completion, with specific provisions for local governments and state agencies.

Introduced → Engrossed · 8 edits · May 27, 2025

MODERATE

This bill establishes the Texas Cyber Command as a new component of The University of Texas System, transferring cybersecurity responsibilities from the Department of Information Resources. The command will develop cybersecurity standards, provide training, and manage threat intelligence for state agencies and critical infrastructure. The bill also reorganizes existing cybersecurity sections into the new chapter and adds requirements for mandatory cybersecurity training for state employees and contractors.

Scope change

The bill expands the scope of cybersecurity oversight by creating a dedicated command under the University of Texas System, while transferring related functions from the Department of Information Resources. It now includes local governments as covered entities and adds specific requirements for cybersecurity training for state employees, local government officials, and contractors.

SCOPE

Establishes the Texas Cyber Command as a new component institution of The University of Texas System, administratively attached to The University of Texas at San Antonio.

DEFINITION

Changed the definition of 'State agency' to exclude legislative branch agencies and added 'local government' as a covered entity for cybersecurity services.

REQUIREMENT

Requires mandatory cybersecurity training for all state agency information resources employees, with provisions for local government employees and contractors.

Prohibits non-citizens from being members, employees, contractors, or volunteers of the Texas Cyber Command or any entities it operates.

Establishes a cybersecurity threat intelligence center, incident response unit, and digital forensics laboratory under the command.

FISCAL

Added provisions for cost recovery from covered entities for direct technical assistance and training services when reasonable and practical.

TIMELINE

Sets a sunset date of September 1, 2031, requiring the command to be continued in existence under the Texas Sunset Act.

TECHNICAL

Transferred and redesignated several existing Government Code sections (2054.510, 2054.0592, 2054.519, 2054.5191, 2054.5192) into the new Chapter 2063 with amendments.

Floor votes · House Apr 15, 2025

How they voted

This bill passed the Senate by voice vote (no roll call recorded).

Full legislative history

Actions timeline

Total actions

Key actions

Committee

Amendments

Jun 2, 2025

Signed into law

Signed by the Governor

executive

Jun 1, 2025

Upper · Passed

Signed in the Senate

upper

May 31, 2025

Lower · Passed

Signed in the House

lower

May 29, 2025

Introduced

House concurs in Senate amendment(s)-reported

upper

May 29, 2025

Introduced

Text of Senate Amendment(s)

lower

May 29, 2025

Introduced

House concurs in Senate amendment(s)

lower

May 28, 2025

Introduced

Senate Amendments Analysis distributed

lower

May 28, 2025

Introduced

Senate Amendments distributed

lower

May 28, 2025

Lower · Passed

Senate passage as amended reported

lower

May 27, 2025

Upper · Passed

Passed

upper

May 27, 2025

Upper · Passed

Passed to 3rd reading as amended

upper

May 27, 2025

Upper · Passed

Amended

upper

May 27, 2025

Introduced

Amendment(s) offered

upper

May 27, 2025

Upper · Passed

Committee report printed and distributed

upper

May 27, 2025

Upper · Passed

Reported favorably as substituted

upper

May 26, 2025

Upper · Passed

Vote taken in committee

upper

May 20, 2025

Upper · Passed

Left pending in committee

upper

May 20, 2025

Upper · Passed

Testimony taken in committee

upper

Apr 28, 2025

Committee

Referred to Business & Commerce

upper

Apr 28, 2025

Introduced

Read first time

upper

Apr 16, 2025

Introduced

Received from the House

upper

Apr 16, 2025

Lower · Passed

Passed

lower

Apr 15, 2025

Lower · Passed

Passed to engrossment as amended

lower

Apr 15, 2025

Amended

Amendment withdrawn

lower

Apr 15, 2025

Introduced

Amendment(s) offered

lower

Apr 15, 2025

Lower · Passed

Amended

lower

Apr 15, 2025

House · Passed

House Vote: pass (131-12-2)

house

Apr 2, 2025

Lower · Passed

Committee report sent to Calendars

lower

Apr 1, 2025

Lower · Passed

Committee report distributed

lower

Mar 27, 2025

Lower · Passed

Reported favorably as substituted

lower

Mar 19, 2025

Lower · Passed

Left pending in committee

lower

Mar 19, 2025

Lower · Passed

Testimony taken/registration(s) recorded in committee

lower

Mar 11, 2025

Committee

Referred to Delivery of Government Efficiency

lower

Mar 11, 2025

Introduced

Read first time

lower

6 primary · 8 co-sponsors