Michigan HB5849 mandates cyber-physical security and operational technology protections for data centers.

Michigan HB5849 establishes requirements for data centers to implement security measures against cyberattacks and physical disruptions. Operators must use safety-critical systems, redundant cooling, thermal controls, and on-site manual override access. They must also create incident response and disaster recovery plans. Violations of these provisions are subject to civil fines. The act defines "critical infrastructure" and "data center" and aligns with nationally recognized cybersecurity frameworks.

Michigan HB5849 mandates cyber-physical security and operational technology protections for data centers.

Michigan HB5849 establishes requirements for data centers to implement security measures against cyberattacks and physical disruptions. Operators must use safety-critical systems, redundant cooling, thermal controls, and on-site manual override access. They must also create incident response and disaster recovery plans. Violations of these provisions are subject to civil fines. The act defines "critical infrastructure" and "data center" and aligns with nationally recognized cybersecurity frameworks.