An Act establishing a Cybersecurity Control and Review Commission

This bill establishes a new Cybersecurity Control and Review Commission to develop and enforce cybersecurity standards for businesses and state agencies in Massachusetts. The commission will be led by state officials and include members appointed by the governor and the Massachusetts Municipal Association, with specific expertise required in healthcare, banking, utilities, and academia. Its primary duties involve creating sector-specific security guidelines based on national frameworks, accrediting businesses that meet these standards, and mandating that entities handling critical data or infrastructure comply with the rules. Additionally, the commission must submit confidential annual reports to legislative committees and release a public summary of its findings.