republic-os/legislation/us/states/in/2025/sb-472.md

type, title, description, jurisdiction, legislature, session, identifier, citation, classification, subjects, status, primary_sponsors, version_count, action_count, vote_count, first_action, last_action, source, source_identifier, source_url, source_hash, vintage, source_snapshot, retrieved_at, confidence, tags

type	title	description	jurisdiction	legislature	session	identifier	citation	classification	subjects	status	primary_sponsors	version_count	action_count	vote_count	first_action	last_action	source	source_identifier	source_url	source_hash	vintage	source_snapshot	retrieved_at	confidence	tags
Bill	Cybersecurity.	Requires political subdivisions, state agencies, school corporations, and state educational institutions (public entities), with the exception of specified categories of hospitals and the Indianapolis department of public utilities (department), to adopt not later than December 31, 2027, a: (1) technology resources policy; and (2) cybersecurity policy; that meet specified requirements. Provides the department is not required to report a cybersecurity incident to the office of technology (office). Requires the office to develop: (1) standards and guidelines regarding cybersecurity for use by political subdivisions and state educational institutions; and (2) a uniform cybersecurity policy for use by state agencies. Requires the office to develop, in collaboration with the department of education: (1) a uniform technology resources policy governing use of technology resources by the employees of school corporations; and (2) a uniform cybersecurity policy for use by school corporations. Requires: (1) a public entity to biennially submit to the office the cybersecurity policy adopted by the public entity; and (2) the office to establish a procedure for collecting and maintaining a record of submitted cybersecurity policies. Requires a public entity that engages a third party to conduct an assessment of the public entity's cybersecurity policy to provide the results of the assessment to the office.	us/states/in	Indiana General Assembly	2025	SB 472	Indiana SB 472 (2025)	bill	AGENCIES; Department of Education (DOE) and Secretary of Education AGENCIES; Department of Homeland Security (IDHS) AGENCIES; Generally AGENCIES; Office of Technology (IOT) BOARDS COMMISSIONS AND COUNCILS; Newly Created CITIES; Indianapolis GENERAL ASSEMBLY; Generally HEALTH CARE FACILITIES; Hospitals HIGHER EDUCATION; Colleges and Universities (Including Ivy Tech) LOCAL GOVERNMENT; Generally SCHOOLS; Generally STATE ELECTED OFFICIALS; Comptroller STATE ELECTED OFFICIALS; Governor TECHNOLOGY; Cyber Security Data Privacy and Identity Theft UTILITIES; Generally	enacted	Brian Buchanan Liz Brown Matt Lehman	5	27	3	2025-01-13	2025-05-01	openstates	ocd-bill/e0d7c4ee-3989-4a3e-a06d-4bab575e1247	https://api.iga.in.gov/2025/bills/sb0472	db86bc3403b5c27a6681ec6f8f29fe9bc19a6954678a0abcf7c0f679b29a8188	2026-07-01	https://data.openstates.org/daily/2026-07-01/public.pgdump	2026-07-06	reported	legislation bill us-in

Indiana SB 472 (2025) — Cybersecurity.

Requires political subdivisions, state agencies, school corporations, and state educational institutions (public entities), with the exception of specified categories of hospitals and the Indianapolis department of public utilities (department), to adopt not later than December 31, 2027, a: (1) technology resources policy; and (2) cybersecurity policy; that meet specified requirements. Provides the department is not required to report a cybersecurity incident to the office of technology (office). Requires the office to develop: (1) standards and guidelines regarding cybersecurity for use by political subdivisions and state educational institutions; and (2) a uniform cybersecurity policy for use by state agencies. Requires the office to develop, in collaboration with the department of education: (1) a uniform technology resources policy governing use of technology resources by the employees of school corporations; and (2) a uniform cybersecurity policy for use by school corporations. Requires: (1) a public entity to biennially submit to the office the cybersecurity policy adopted by the public entity; and (2) the office to establish a procedure for collecting and maintaining a record of submitted cybersecurity policies. Requires a public entity that engages a third party to conduct an assessment of the public entity's cybersecurity policy to provide the results of the assessment to the office.

Version chain

The bill's text revisions, in order — the diff chain from filing to enrollment.

1. Engrossed Senate Bill (H) (committee substitute) — source
2. Enrolled Senate Bill (S) (committee substitute) — source
3. Introduced Senate Bill (S) (committee substitute) — source
4. Senate Bill (H) (committee substitute) — source
5. Senate Bill (S) (committee substitute) — source

Votes

• SB 472 - Brown L — 43–0 (pass) · upper
• SB 472 - Lehman - 3rd Reading — 97–0 (pass) · lower
• SB 472 - Brown L - 3rd Reading — 47–2 (pass) · upper

Sponsors

• Brian Buchanan — primary (person)
• Liz Brown — primary (person)
• Matt Lehman — primary (person)
• Danny Lopez — cosponsor (person)
• Lonnie Randolph — coauthor (person)
• Robert Morris — cosponsor (person)
• Timothy O'Brien — cosponsor (person)

Timeline

The legislative action history — every referral, reading, and vote.

• 2025-01-13 Authored by Senator Brown L
• 2025-01-13 First reading: referred to Committee on Commerce and Technology reading-1, referral-committee
• 2025-01-16 Senator Buchanan added as second author
• 2025-01-23 Committee report: amend do pass adopted; reassigned to Committee on Appropriations committee-passage, referral-committee
• 2025-02-13 Committee report: amend do pass, adopted committee-passage
• 2025-02-13 Senator Randolph added as coauthor
• 2025-02-17 Amendment #1 (Brown L) prevailed; voice vote amendment-passage
• 2025-02-17 Second reading: amended, ordered engrossed reading-2
• 2025-02-20 House sponsor: Representative Lehman
• 2025-02-20 Third reading: passed; Roll Call 200: yeas 47, nays 2 passage, reading-3, reading-3
• 2025-02-21 Referred to the House referral
• 2025-02-20 Cosponsors: Representatives Morris and Lopez
• 2025-03-03 First reading: referred to Committee on Government and Regulatory Reform reading-1, referral-committee
• 2025-03-17 Representative O'Brien added as cosponsor
• 2025-03-24 Committee report: amend do pass, adopted committee-passage
• 2025-03-24 Recommitted to Committee on Ways and Means pursuant to House Rule 126.3
• 2025-04-10 Committee report: amend do pass, adopted committee-passage
• 2025-04-14 Second reading: ordered engrossed reading-2
• 2025-04-15 Third reading: passed; Roll Call 454: yeas 97, nays 0 passage, reading-3, reading-3
• 2025-04-16 Motion to concur filed filing
• 2025-04-16 Returned to the Senate with amendments receipt
• 2025-04-21 Senate concurred with House amendments; Roll Call 477: yeas 43, nays 0
• 2025-04-22 Signed by the Speaker passage
• 2025-04-22 Signed by the President Pro Tempore passage
• 2025-04-23 Signed by the President of the Senate passage
• 2025-05-01 Public Law 142 became-law
• 2025-05-01 Signed by the Governor executive-signature

Source

OpenStates / OpenCivicData bulk snapshot 2026-07-01; origin ocd-bill/e0d7c4ee-3989-4a3e-a06d-4bab575e1247. Confidence: reported (aggregated from official Indiana legislature records).