Skip to content

Session Expired

Your session has expired. Please sign in again to continue where you left off.

Sign In Again

MA S49: Relative to cybersecurity and artificial intelligence

In Committee Massachusetts · 2025–2026 session

Last verified Oct 20, 2026 · official bill text

S49 · where it stands

1 of 5 steps complete
  1. Introduced In committee
  2. Passed first chamber
  3. Passed both chambers
  4. Enacted
  5. Effective
What do these statuses mean?
Introduced
Filed in the legislature; may be waiting for a committee hearing.
Passed a chamber
Approved by one or both chambers; awaiting further action.
Enacted
Signed into law, or became law without a signature or over a veto.
Effective date
The date the law says it takes effect. Once it has passed, the page shows "Effective" and the date. A court order can still block a law; if we know of one, the summary says so.
Dead / vetoed
Vetoed, failed, or the session ended without action.

In one paragraph

Massachusetts S49 is a broad cybersecurity bill that would require annual cybersecurity training for public employees, create a Cybersecurity Control Board and state cybersecurity code (artificial intelligence is one listed standards area), and create an Automated Decision Making Control Board to study and regulate automated decision systems. Reported favorably and referred to Senate Ways and Means May 12, 2025.

Plain-English summary, written with AI assistance. The official text controls.

What it means for business

None yet: the bill has not been enacted. If enacted, entities subject to the state cybersecurity code would face fines for violations, and automated decision systems would be surveyed and regulated by a new board.

Key provisions

  1. Chapter 7D, s. 12: state, county and municipal employees must complete cybersecurity awareness training within 30 days of hire and annually.
  2. Section 14: Cybersecurity Control Board adopts a state cybersecurity code with minimum standards across eleven areas including artificial intelligence; violations carry fines up to $10,000, each day a separate offense.
  3. Section 17: Automated Decision Making Control Board surveys automated decision systems used by covered entities, develops safeguards against disparate impacts, and publishes an annual report by December 31 with a public record of government systems; violations of its provisions carry fines up to $1,000.
  4. Also covers critical infrastructure incident reporting, data breach law changes, and a ban on weaponized robotic devices (G.L. c. 140, s. 131Z).
  5. Takes effect upon passage (Section 22).

Latest legislative action

May 12, 2025. Bill reported favorably by committee and referred to the committee on Senate Ways and Means

Sponsors (showing 5 of 12)

NameRole
Primary
Primary
D Primary
D Primary
Cosponsor

Topics and industries

Related topics

Automated Decision-MakingAI in Government

Affected industries

GovernmentTechnology

This page is general information, not legal advice. Summaries are AI-assisted and may contain errors; read the statute for the controlling text and talk to a lawyer about your situation. Full disclaimer · Report an error

Related AI laws in Massachusetts

All Massachusetts bills →
H77 Fostering artificial intelligence responsibility S2963 An Act relative to justice, equity and accountability in law enforcement in the H97 Protecting consumers in interactions with artificial intelligence systems H78 Establishing the Massachusetts consumer data privacy act S33 Establishing the Comprehensive Massachusetts Consumer Data Privacy Act H104 Establishing the Massachusetts Data Privacy Act

Same topic in other states

Montana HB178 Limit government use of AI systems Utah HB444 Data Privacy Amendments Texas HB2060 Relating to the creation of the artificial intelligence advisory council. Virginia SB487 Artificial intelligence by public bodies; Joint Commission on Technology and Sci Vermont H410 An act relating to the use and oversight of artificial intelligence in State gov Ohio SB315 Enact the Enhanced Cybersecurity for SNAP Act