Maine legislation · 132nd Legislature
Maine LD2103: An Act Requiring Hospitals to Adopt Cybersecurity Plans
Status: Signed into law, April 13, 2026
What the bill says
An Act Requiring Hospitals to Adopt Cybersecurity Plans.
From the engrossed text:
An Act Requiring Hospitals to Adopt Cybersecurity Plans Sec. 1. 22 MRSA §1832, as enacted by PL 2011, c. 254, §1 and affected by §2, is repealed and the following enacted in its cybersecurity 1. Safety and security plan. A hospital licensed under this chapter shall, on an annual basis, adopt a safety and security plan to protect the patients, visitors and employees of the hospital from aggressive and violent behavior. The safety and security plan must include a process for hospitals to receive and record incidents and threats of violent behavior occurring at or arising out of employment at the hospital. The safety and security plan must prohibit a representative or employee of the hospital from interfering with a person making a report as provided in the plan. 2. Cybersecurity plan. A hospital licensed under this chapter shall adopt a cybersecurity plan. The cybersecurity plan must be consistent with best practices established by the United States Department of Homeland Security, Cybersecurity and Infrastructure Security Agency; the United States Department of Commerce, National Institute of Standards and Technology; and the Healthcare and Public Health Sector Coordinating Council or its successor organization. The cybersecurity plan must be consistent with applicable federal laws and regulations, including the federal Health Insurance Portability and Accountability Act of 1996. The hospital shall review the cybersecurity …
Sponsors
- McCabe, Julia (D, 93) · primary sponsor
- Mana Abdi (D, 95)
- Sean Faircloth (D, 24)
- Michel Lajoie (D, 96)
- Adam Lee (D, 89)
- Kilton Webb (D, 98)
Latest actions
- : PASSED TO BE ENACTED, in concurrence.
- : PASSED TO BE ENACTED. Sent for concurrence. ORDERED SENT FORTHWITH.
- : Report READ and ACCEPTED, in concurrence.READ ONCE.Committee Amendment "A" (H-937) READ and ADOPTED, in concurrence.Under suspension of the Rules, READ A SECOND TIME and PASSED TO BE ENGROSSED AS AMENDED BY Committee Amendment "A" (H-937), in concurrence.Ordered sent down forthwith.
- : CONSENT CALENDAR - FIRST DAYUnder suspension of the rules CONSENT CALENDAR - SECOND DAY.The Bill was PASSED TO BE ENGROSSED as Amended by Committee Amendment "A" (H-937).Sent for concurrence. ORDERED SENT FORTHWITH.
- : The Bill was REFERRED to the Committee on HEALTH AND HUMAN SERVICES in concurrence
- : Committee on Health and Human Services suggested and ordered printed. The Bill was REFERRED to the Committee on HEALTH AND HUMAN SERVICES.Sent for concurrence. ORDERED SENT FORTHWITH.
Subjects: HEALTH CARE SERVICES, Legislature, DELIVERY, Senate, CYBERSECURITY TASK FORCE, Other
Common questions
- What is LD2103?
- LD2103 is a bill in the Maine Legislature (132nd Legislature): An Act Requiring Hospitals to Adopt Cybersecurity Plans.
- What does LD2103 do?
- In its own words: An Act Requiring Hospitals to Adopt Cybersecurity Plans.
- What is the status of LD2103?
- Signed into law as of April 13, 2026. Latest action: PASSED TO BE ENACTED, in concurrence. (April 6, 2026).
- Who sponsored LD2103?
- McCabe, Julia (D, 93), with 5 co-sponsors.
- Where is the official record for LD2103?
- On the Maine Legislature website: https://legislature.maine.gov/legis/bills/display_ps.asp?LD=2103&snum=132
Source: official Maine record. Tracked by Delilah, AI for legislation across all 50 states and Congress.