The status of new cybersecurity laws proposed in Illinois

As employers in the private and public sectors adjust to the advent of flexible work over the last two years, they're simultaneously trying to protect their organizations from attackers looking to steal and sell data.

2021 was a year defined by significant cyberattacks that crippled infrastructure and shut down hospitals, schools, and municipal governments. It's the same year the Colonial Pipeline, which supplies gasoline to millions living in the Northeast U.S., was hobbled by a ransomware attack that triggered a gas panic and elevated prices for consumers.

And lawmakers were paying attention—passing dozens of laws in 2022 aimed at training workers, securing government agencies, and funneling money into cybersecurity education programs.

Drata compiled a list of new cybersecurity-related legislation in Illinois through February 2023 based on data collected by the National Conference of State Legislatures.

States that passed the most cybersecurity legislation in the past year:

#1. Maryland - 8 laws enacted

#2. Florida - 4

#3 (tie). Virginia - 3

#3 (tie). Kentucky - 3

Illinois new cybersecurity laws in 2022
- Bills enacted: 2
- Bills failed: 0
- Bills vetoed: 0

IL HB 900
- Description: Appropriates monies to the Department of Commerce and Economic Opportunity, relates to Labor and Employment Relations, relates to Build Illinois Bond fund.
- Read more about the bill here

IL SB 3939
- Description: Provides that the principal executive officer, or his or her designee, of each municipality with a population of 35,000 or greater and of each county shall designate a local official or employee as the primary point of contact for local cybersecurity issues, provides that each jurisdiction must provide the name and contact information of the cybersecurity designee to the Department of Innovation and Technology Act and update the information as necessary.
- Read more about the bill here