Shown verbatim: the complete text as captured from the official source posted by the Massachusetts General Court, fetched 2026-07-15. Nothing is edited or removed. The official bill page.
Chapter 7D of the General Laws as appearing in the 2022 Official Edition is hereby amended in Section 7 by adding the following subsections:- (e) No State agency, local government entity, or municipality shall submit payment or otherwise communicate with an entity that has engaged in a cybersecurity incident on an information technology system by encrypting data and then subsequently offering to decrypt that data in exchange for a ransom payment. (f) Any State agency or local government entity experiencing a ransom request in connection with a cybersecurity incident shall report to and consult with the CIO.
Every fact on this page links to its source, starting with the official bill record.