WeVote

Bill

Bill

SB 75

INFORMATION TECHNOLOGY: Provides for reimbursement to the state for cyber reinforcement support provided to noncompliant recipients. (8/1/26) (EN SEE FISC NOTE SG RV)

2026 Regular Session Introduced by Valarie Hodges

Louisiana SB 75 creates cybersecurity standards for local entities seeking state help after incidents and requires noncompliant subdivisions to reimburse the state for reinforcemen

Signed by the Governor. Becomes Act No. 239.
0
WeVote Research Nonpartisan
Bill Summary · SB 75

Summary of Louisiana Senate Bill 75 (SB 75) - 2026 Regular Session

Jurisdiction: Louisiana
Title: INFORMATION TECHNOLOGY: Provides for reimbursement to the state for cyber reinforcement support provided to noncompliant recipients. (Effective 8/1/2026)

Sponsor: Senator Hodges (co-sponsor: Valarie Hodges)

Key Purpose
- Establish a framework for cybersecurity standards applicable to local governmental subdivisions and political subdivisions that seek state assistance in response to a cybersecurity incident.
- Create a mechanism requiring reimbursement to the state for cyber reinforcement support provided to subdivisions that do not comply with the promulgated cybersecurity standards.

Effective Date
- August 1, 2026

What the Bill Would Do (Main Provisions)
1. Authority and rulemaking for GOHSEP
- GOHSEP (Governor’s Office of Homeland Security and Emergency Preparedness) would be required to promulgate rules under the Administrative Procedures Act (APA) establishing cybersecurity standards for local governmental and political subdivisions seeking state assistance after a cybersecurity incident.
- The initial rules may be promulgated using the emergency rulemaking process.

  1. Cybersecurity Standards

    • The rules must establish minimum cybersecurity standards for technical management practices.
    • Standards should ensure cybersecurity compliance with national standards.
    • The standards would also set eligibility requirements for receiving state assistance in response to cybersecurity incidents.
  2. Reimbursement and noncompliance

    • The bill clarifies that nothing would prevent GOHSEP from entering into contracts to provide services to a subdivision that is not in compliance with the promulgated standards.
    • If a subdivision receives such services while noncompliant, the noncompliant subdivision would be responsible for reimbursing the cost of those services to the state.
    • This creates a cost-recovery mechanism to recoup state spending on cyber reinforcement for noncompliant local entities.
  3. Administrative processes

    • GOHSEP may use emergency rulemaking to issue the initial administrative rules authorized by the bill.
  4. Additions to law

    • Adds a new provision to R.S. 29:726(E)(31) detailing the authority, responsibilities, and rulemaking for cybersecurity standards and reimbursement.

Who Would Be Affected
- Local governmental subdivisions and political subdivisions that:
- Seek state assistance in response to cybersecurity incidents.
- Are subject to GOHSEP-administered cybersecurity standards under the new rules.
- The affected subdivisions that fail to comply with the standards would face reimbursement obligations for state-provided cyber reinforcement services.

Potential Impact
- Establishes national-standard cybersecurity requirements for local entities seeking state help after cyber incidents.
- Shifts some financial responsibility to noncompliant subdivisions by obligating them to reimburse the state for cyber defense services.
- Provides GOHSEP with a formal rulemaking framework to standardize incident response and cybersecurity measures across subdivisions.
- Encourages proactive compliance to avoid reimbursement costs, while allowing GOHSEP to contract for services even with noncompliant entities (with cost recovery to follow).

Notes
- The bill includes amendments that are technical in nature and does not alter other GOHSEP authorities.
- The digest confirms the intent to establish standards, eligibility, and reimbursement practices, with emergency rulemaking authority for initial rules.

Compiled from official sources — confirm details with the bill’s official record.

Sign in to ask a question.