POLISCOPE
Back to bills
Part ofCybersecurity →

The civic record

Read. Follow. Verify.
HB 2271KANSASSession 2025-2026State Billdead
Did Not Advance

Kansas bill removes expiration dates for state cybersecurity consolidation and oversight requirements

Original title: AN ACT concerning cybersecurity; removing the expiration provisions of cybersecurity legislation; consolidating cybersecurity services under the chief information security officer of each branch; amending K.S.A. 2024 Supp. 40-110, 75-413, 75-623, 75-710, 75-711, 75-7203, 75-7206a, 75-7208a, 75-7245 and 75-7246 and repealing the existing sections; also repealing K.S.A. 2023 Supp. 45-229, as amended by section 11 of chapter 95 of the 2024 Session Laws of Kansas, 75-7201, as amended by section 17 of chapter 95 of the 2024 Session Laws of Kansas, 75-7202, as amended by section 19 of chapter 95 of the 2024 Session Laws of Kansas, 75-7203, as amended by section 21 of chapter 95 of the 2024 Session Laws of Kansas, 75-7205, as amended by section 23 of chapter 95 of the 2024 Session Laws of Kansas, 75-7206, as amended by section 25 of chapter 95 of the 2024 Session Laws of Kansas, 75-7208, as amended by section 27 of chapter 95 of the 2024 Session Laws of Kansas, 75-7209, as amended by section 29 of chapter 95 of the 2024 Session Laws of Kansas, 75-7237, as amended by section 31 of chapter 95 of the 2024 Session Laws of Kansas, 75-7238, as amended by section 33 of chapter 95 of the 2024 Session Laws of Kansas, 75-7239, as amended by section 35 of chapter 95 of the 2024 Session Laws of Kansas, 75-7240, as amended by section 37 of chapter 95 of the 2024 Session Laws of Kansas.

Last action · April 10, 2026: Died in Senate Committee

Bill progressHistory & official text ↓
Introduced
Committee
Floor Vote
Passed
Law

Track this bill to get notified when it advances a stage. One tap to stop, anytime.

Public stanceCommunity reactions are separate from the official record and reporting.

What This Bill Proposed

This bill removes the July 1, 2026, expiration dates for existing cybersecurity statutes, permanently centralizing cybersecurity services under each branch's chief information security officer and requiring state agencies to comply with NIST standards or face budget penalties.

Why it matters

State agencies and branch offices face permanent cybersecurity oversight, mandatory annual training for all employees with hardware access revocation for non-compliance, and potential 5% budget penalties starting July 1, 2028, if found non-compliant with state cybersecurity rules.

Who It Would Have Affected

Groups the bill's text would have affected, as described in the record. Being affected is not a position for or against it.

Directly affected

State agency employees

Must complete annual cybersecurity training or face revocation of access to state-issued hardware and the state network.

Directly affected

State agencies

Must comply with NIST CSF 2.0 standards, undergo annual federal audits, and face potential 5% budget certification penalties for non-compliance.

Directly affected

Chief information security officers

Tasked with establishing security standards, developing compliant cybersecurity programs, and coordinating annual audits for their respective branches.

Key Facts

You don't have to trust us. Each fact below is taken straight from the official document - click any one to see the exact passage, highlighted in the original.

Frequently Asked Questions

What happens if a state employee fails to complete annual cybersecurity training?
If an employee does not complete the required cybersecurity awareness training, their access to any state-issued hardware or the state network is immediately revoked.
Are the results of state cybersecurity audits public record?
No, the results of audits conducted by the United States cybersecurity and infrastructure security agency are confidential and are not subject to discovery or disclosure under the .
What are the financial consequences if a state agency fails to comply with cybersecurity provisions?
Beginning July 1, 2028, the director of the budget can certify a 5% reduction amount from the state general fund and s for agencies found not in compliance.

What else do you want to know?

News Coverage

No news coverage found yet. Articles are indexed twice daily.

Follow the record

Votes, people, money & the original source

Where This Stands

This bill did not become law - Died in committee.

Procedural history

12 actions
  1. Apr 10, 2026Senate
    Died in Senate Committee
  2. Feb 26, 2025SenateCommittee
    Referred to Senate Committee on Federal and State Affairs
  3. Feb 25, 2025SenateIntroduced
    Received and Introduced
  4. Feb 20, 2025House
    Committee of the Whole - Now working on
  5. Feb 20, 2025HouseFloor
    Committee of the Whole - Be passed
  6. Feb 20, 2025HouseFloor
    Motion to advance to Emergency Final Action adopted
Show 6 earlier actions
  1. Feb 20, 2025HouseFloor
    Emergency Final Action - Passed
  2. Feb 18, 2025HouseFloor
    Committee Report recommending bill be passed by
  3. Feb 17, 2025House
    Hearing: Monday, February 17, 2025, 9:00 AM — Room 218-N
  4. Feb 12, 2025House
    Hearing: Wednesday, February 12, 2025, 9:00 AM — Room 218-N — CANCELED
  5. Feb 5, 2025HouseIntroduced
    Introduced
  6. Feb 5, 2025HouseCommittee
    Referred to House Committee on Legislative Modernization

Version history

Only one version on file - nothing to compare yet. As later stages (committee substitute, engrossed, enrolled) are captured, the redline appears here.

View official text →

Lobbying Activity

No state lobbying filings in our records match this bill. Federal lobbying reports (LDA) cover Congress, so they are not listed on state bills.

Full breakdown

Who this bill affects and the strongest case for and against it, written only from the bill’s own text.

Discoveries

2 patterns noticed across the record

Patterns POLISCOPE noticed across the record. These are observations to investigate, not conclusions.

policy shift99% confidence

Permanent Removal of Cybersecurity Sunsets

The bill removes previously imposed July 1, 2026, expiration dates across multiple executive, judicial, and legislative statutes, cementing permanent centralized cybersecurity oversight.

Kansas
financial connection98% confidence

Enforceable Budget Penalties for Non-Compliance

Starting July 1, 2028, state agencies failing cybersecurity compliance audits face potential 5% reductions in appropriations from both the state general fund and special revenue funds.

Kansas

Connected Entities

Kansas Bureau of Investigation, National Institute of Standards and Technology, Kansas and 2 more
OrganizationKansas Bureau of Investigation“Division under the jurisdiction of the attorney general”Map →
OrganizationNational Institute of Standards and Technology“Provider of cybersecurity framework (CSF) 2.0 standards”Map →
locationKansas“State jurisdiction enacting the legislation”Map →
OrganizationHouse Committee on Legislative Modernization“House committee sponsoring HB 2271”Map →
OrganizationUnited States Cybersecurity and Infrastructure Security Agency“Federal agency tasked with performing annual cybersecurity audits for state agen”Map →

Sources

Open source document

www.kslegislature.gov

Analysis Score

0–100
  • Significance20
    Lowered because this bill did not pass (its text scored 75)
  • Controversy20
    Intensity of disagreement among stakeholders
  • Entertainment5
    Compellingness for a non-policy-wonk reader
  • Buzz25
    Current news / social attention level

Publisher tools

Share or embed this record

POLISCOPE publisher tools

Share or embed this record