AN ACT CONCERNING CYBERSECURITY.

This bill establishes new cybersecurity requirements for businesses, healthcare organizations, and government contractors in Connecticut that handle sensitive data or operate critical infrastructure. It mandates compliance with federal cybersecurity frameworks, requires incident reporting within 72 hours, and prohibits retaliation against employees who report security issues. The legislation also creates a state cybersecurity grant program, establishes a bug bounty system for security researchers, and requires entities to prepare for future quantum computing threats by 2028.