HB2809

Statewide cybersecurity encryption system; requirements

Chamber Passed·2/26/26

Arizona HB2809 mandates a statewide cybersecurity system using post-quantum encryption for state agencies.

Arizona HB2809 requires the implementation of a statewide cybersecurity system using post-quantum encryption across all state agencies. This system must meet or exceed the United States Department of Defense's cybersecurity maturity model certification (CMMC) 2.0 standards. The bill mandates that state agencies install, validate, and maintain compliance with the system's security requirements. The auditor general is tasked with establishing secure key management procedures, conducting periodic audits, and certifying the installation and operational validation for each state agency.

Included in complete analysis

  • Overview
  • Core Provisions
  • Implementation
  • Impact
  • Legal Framework
  • Critical Issues

See what it does, who it affects, and the critical issues in plain language. Free, 30 seconds.

Where it stands

Last
Passed the House · 6–3 · Feb 26
Current
Rules Committee
Next
Senate floor vote

Sponsors

0
1
R
Democratic CaucusRepublican Caucus

Roll Call Votes

6 Yea

RRRRRR

3 Nay

DDD

1 Not Voting

D

Calendar

Mar 17

1:30 PM

Senate Appropriations, Transportation and Technology

Feb 16

1:00 PM

House Rules

History

Mar 17

Senate

Senate ATT Committee action: Do Pass, voting: (6-3-1-0)

Mar 10

Senate

Senate read second time

Mar 9

Senate

Introduced in Senate and read first time