The status of new cybersecurity laws proposed in Washington

As employers in the private and public sectors adjust to the advent of flexible work over the last two years, they're simultaneously trying to protect their organizations from attackers looking to steal and sell data.

2021 was a year defined by significant cyberattacks that crippled infrastructure and shut down hospitals, schools, and municipal governments. It's the same year the Colonial Pipeline, which supplies gasoline to millions living in the Northeast U.S., was hobbled by a ransomware attack that triggered a gas panic and elevated prices for consumers.

And lawmakers were paying attention—passing dozens of laws in 2022 aimed at training workers, securing government agencies, and funneling money into cybersecurity education programs.

Drata compiled a list of new cybersecurity-related legislation in Washington through February 2023 based on data collected by the National Conference of State Legislatures.

States that passed the most cybersecurity legislation in the past year:

#1. Maryland - 8 laws enacted

#2. Florida - 4

#3 (tie). Virginia - 3

#3 (tie). Kentucky - 3

Washington new cybersecurity laws in 2022
- Bills enacted: 1
- Bills failed: 4
- Bills vetoed: 0

WA SB 5693
- Description: Makes 2021-2023 fiscal biennium supplemental operating appropriations, defines certain terms, provides for conditions and limitations on certain appropriations. Provides funding for the security operations center, including identified needs for expanded operations, systems, technology tools, training resources; additional staff dedicated to the cyber and physical security of election operations at the office and county election offices; expanding security assessments, threat monitoring, enhanced security training; and providing grants to county partners to address identified threats and expand existing grants and contracts with other public and private organizations such as the Washington military department, national guard, private companies providing cyber security, and county election offices. Provides funding for cybersecurity initiatives in the workforce education investment account.
- Read more about the bill here