Sen. Dan Laughlin

Maddy summarySB 415 creates new criminal penalties for ransomware attacks targeting Pennsylvania state government systems. It prohibits possessing, using, or threatening to use ransomware (defined as software blocking access or encrypting data for payment demands) with penalties ranging from misdemeanors to felonies based on the ransom amount ($10,000+ triggers felony charges). The law requires managed IT service providers to notify state agencies within one hour of detecting ransomware, and agencies to report attacks to police within two hours. These provisions aim to prevent, detect, and respond to cyberattacks on Commonwealth agencies while mandating public notification after incidents.

Maddy summaryThis resolution designates April 2025 as "Community College Month" in Pennsylvania. It is a symbolic gesture recognizing community colleges' role in providing affordable higher education, workforce training, and access to students from diverse backgrounds. The resolution does not create new policies, funding, or direct impacts on individuals or institutions. It serves only to highlight community colleges' contributions through a designated month of recognition.

Maddy summaryThis is a symbolic resolution (not a law) that formally recognizes March 8, 2025, as "International Women's Day" in Pennsylvania. It does not create new policies, allocate funds, or directly affect any individuals or groups. The resolution expresses the Senate's support for the global observance of International Women's Day, highlighting women's achievements and the ongoing pursuit of gender equality. It serves as a ceremonial acknowledgment with no concrete policy changes or legal impact.

Maddy summarySB 373 establishes new statewide cybersecurity standards for Pennsylvania state agencies' information technology systems. It requires agencies to obtain "authorization to operate" for all IT systems using public funds, conduct annual security reviews, and perform risk assessments - including penetration testing - to identify vulnerabilities. The bill mandates biannual compliance checks of vendors and creates a Joint Cybersecurity Oversight Committee to monitor implementation. These requirements directly affect all state agencies and their IT vendors, focusing on proactive security management rather than reactive measures.

Maddy summarySB 399 shortens the time limit for filing lawsuits related to construction projects in Pennsylvania. It reduces the general deadline from 12 years to 6 years after construction completion for claims against contractors, designers, or supervisors. The bill also creates an exception: if injury or death occurs between 4 and 6 years after completion, lawsuits can be filed within 8 years (down from 14). This applies to anyone "lawfully" performing construction work, including those with required permits. The changes take effect 60 days after enactment.

Maddy summarySB 332 amends Pennsylvania's Election Code to change the date of the general primary election in presidential election years. Currently, the primary is held on the third Tuesday of March in such years, but this bill would move it to the fourth Tuesday of April. This change applies to general primaries starting in 2028 and affects how voters select candidates for statewide offices and the presidency. The bill directly impacts election scheduling for voters, candidates, and officials by altering the timing of primary elections.

Maddy summaryThis resolution designates February 17-23, 2025, as "THON Week" in Pennsylvania to honor Penn State student volunteers involved in the IFC/Panhellenic Dance Marathon. It recognizes their work supporting pediatric cancer research and patient care through the Four Diamonds Fund at Penn State Hershey Children's Hospital. The resolution does not create new laws or alter funding; it is a ceremonial acknowledgment of the event's mission and impact. THON, a student-run philanthropy, has raised over $236 million since 1977 for childhood cancer support.

Maddy summaryThis bill sets new limits on damages in lawsuits against Pennsylvania state and local governments. For state government cases, it caps non-death/disfigurement damages at $250,000 per plaintiff or $1 million total, with higher caps ($1 million per plaintiff or $2 million total) for permanent dismemberment or death. For local governments, it sets a $500,000 total cap (except for higher caps in dismemberment/death cases). It also restricts pain and suffering claims to cases where medical/dental expenses exceed $10,000 for permanent injuries. The changes apply to all claims arising on or after the effective date (60 days after enactment).

Maddy summarySB 309 amends Pennsylvania's Construction Code Act to change how municipalities enforce building safety standards. It requires municipalities to use two or more non-affiliated third-party agencies for code enforcement after January 1, 2026 (replacing a current one-agency option that expires then), with contracts limited to three years and strict requirements for agency qualifications and public solicitation. The bill also mandates that permit applications inform applicants about third-party agency roles, complaint procedures, and department oversight, while requiring municipalities to maintain complaint records and file waiver requests if they cannot secure two agencies. These changes directly affect local governments and building permit applicants by restructuring enforcement oversight and accountability.

Maddy summarySB 374 creates a new Office of Information Technology within Pennsylvania's state government, led by a Chief Information Officer (CIO) appointed by the Governor with Senate confirmation. The CIO, who becomes part of the Governor's Cabinet, will manage all state agency IT systems and establish security protocols for data handled by those agencies. This bill directly affects all Pennsylvania state agencies operating under the Governor's authority, centralizing oversight of their technology infrastructure. The key change is replacing fragmented IT management with a single, accountable office responsible for both operations and cybersecurity across state agencies.