MD HB376: Maryland Cybersecurity Council - Alterations

In one paragraph

Maryland's HB 376 restructures the Maryland Cybersecurity Council and adds AI duties. Working with NIST, other federal agencies, businesses, nonprofits and experts, the Council must assess and address cybersecurity threats and associated risks from AI and quantum computing and address emerging AI threats, including adversarial AI, cyber attacks, deepfakes, unethical use and fraud. The Attorney General no longer chairs it; from October 1, 2025 members elect a chair and vice chair every 2 years. Appointed seats become designated ones, including nine higher education members (at least four with AI and quantum computing expertise). Approved May 20, 2025 (Chapter 627); effective October 1, 2025.

Plain-English summary, written with AI assistance. The official text controls.

What it means for business

No duties for businesses. Industry associations designate Council members from cybersecurity companies, banks, hospitals, water systems and electric companies, and the Council works with private businesses to assess AI and quantum computing cyber risks.

Key provisions

1. 1State Government § 9-2901(j): the Council must work with the National Institute of Standards and Technology, other federal agencies, private sector businesses, nonprofits and private cybersecurity experts to assess and address cybersecurity threats and associated risks from AI and quantum computing in carrying out its listed duties
2. 2New duties: address sensitive privacy interests of State residents related to cybersecurity, and address emerging threats posed by AI, including adversarial AI, cyber attacks, deepfake technologies, unethical use and fraud
3. 3§ 9-2901(g): the Attorney General no longer chairs the Council; beginning October 1, 2025 and every 2 years after, the Council elects a chair and vice chair from its members, one a State employee and one not; the chair invites federal agency members and may add other stakeholders
4. 4Adds the People's Counsel and replaces Attorney General appointees with designated seats: four Maryland cybersecurity company representatives named by the Cybersecurity Association of Maryland (at least three from companies with 50 or fewer employees), the heads of the Maryland Chamber of Commerce and the Cybersecurity Association of Maryland, and bank, hospital, water system and electric company chief information security officers named by their associations
5. 5Nine higher education members with cybersecurity expertise, at least four with AI and quantum computing expertise: the presidents (or designees) of Bowie State, Johns Hopkins, Morgan State, UM Baltimore, UMBC and UM College Park, the UMGC cybersecurity school dean and two named by the USM Chancellor
6. 6Also adds the heads of CASH Campaign of Maryland, Economic Action Maryland, the Electronic Privacy Information Center, the Center for Democracy and Technology, the Technology Advancement Center and the Center for Governance of Technology and Systems; drops the business association, crime victims, susceptible-industry and health records seats
7. 7Section 2: the General Assembly intends the Council to review its subcommittee structure and adopt bylaws by December 1, 2025
8. 8Approved by the Governor May 20, 2025 (Chapter 627 of 2025; cross-filed with SB 294); effective October 1, 2025

Latest legislative action

May 20, 2025. Approved by the Governor - Chapter 627

Sponsors

Roll call votes

Amendments (2)

• Favorable with Amendments 533323/1 Adopted Adopted 2025-02-25
• Favorable with Amendments 783022/1 Adopted Adopted 2025-04-05