1

California State Senate

2
3
OFFERED
4
February 6th, 2015
5
6
Senate Bill No. 7080
7
8Principal Author: Timothy Koen
9
10
A BILL TO BE ENTITLED
11
12
Hacking Defense Act of 2015
13PURPOSE SECTION
14 FOR the purpose of protecting California based Technology companies from
15computer-based security breaches and hacking attacks.
16PREAMBLE
17WHEREAS, in 2014 alone, over five million usernames and passwords associated with
18Google Mail (Gmail) were hacked; and,
19WHEREAS, in 2010 hacking group Anonymous attacked and temporarily stopped the
20performance of Paypal; and,
21WHEREAS, in 2014 a small team of teenagers managed to shutdown PSN (PlayStation
22Networks online service) and severely cripple the performance of Xbox Live; and,
23WHEREAS, in 1994 Vladimir Levin transferred approximately $10 Million USD from
24the accounts of Citibank clients to his own; and,
25WHEREAS, in 2014 alleged insiders at Sony leaked information of the company to
26North Korea and attacked Sony for releasing The Interview.
27THEREFORE BE IT ENACTED BY THE CONGRESS of the STATE OF
28CALIFORNIA: All California based technology companies shall form a team of four or
29more Cyber-security professionals and undergo research of how to improve the cyber30security of their company and others through a meeting done between California based
31companies on the first day of each month in the year.
32
33Section 1 - ENACTMENT CLAUSE
34
35

1. a. All California based technology companies shall form a team of

four or more cyber-security professionals dedicated to researching and

36

developing the security of that company. The cyber-security team and

37

the IT Manager of the company shall also meet with other cyber-

38

security research teams of other California based companies on the

39

first day of each month of the year in the Capitol Building in Sausalito.

40

b.

41

the team, and the IT Manager is responsible for directing and guiding the

42

team, and for presenting any advancements made in the cyber-security of

43

that company to the CEO and/or the sole proprietor of the company.

44

Whether or not said advancement is installed into the company is a choice

45

made by the CEO and/or the proprietor of the technology company.

46

c.

47
48
49
50
51

The President or CEO of each company is responsible for forming

As used in this act:

Team means: a group of individuals dedicated to the same

objective.
Cyber-security means: Any form of security that has to do with
technology (i.e. Website security, payment security, online services etc.)
Professional(s) means: A single individual which has at least

52

four years of experience in dealing with and improving Cyber-security.

53

IT Manager means: The supervisor or manager involved with

54
55
56
57

directing or managing information technology.

California based means: Having been created or founded in
California.
Technology means: having to do with manufacturing computers,

58

phones, tablets, laptops, etc. or creating software or an online service in

59

which someone may purchase an item or purchase the software.

60

Information Technology means: The study or use of systems

61

(esp. computers and telecommunications) for (but not limited to) storing,

62

retrieving, and sending information.

63

IT means: an abbreviation for Information Technology.

64Section 2 - ENFORCEMENT
65

2. a. The CEO or proprietor of the company is responsible for informing

66

the IT Manager of the law within 20 days of passage, and the IT

67

Manager must form the cyber-security team within 100 days of being

68

informed. Failure for the company to form the team, inform the IT

69

Manager, and attend the meetings will result in a $10,000 USD fine

70

minimum and up to a $20,000 USD fine maximum for first offenders;

71

repeat offenders will have a minimum fine of $20,000 USD, and a

72

maximum fine of $30,000 USD. The FBI may decide whether or not

73

such violation has occurred and may issue a summons for a violation

74

of the HDA of 2015 upon investigation into the matter. The fine shall

75

be paid to the National Security Agency.

76
77Section 3 - CLOSING SECTION
78The requirements, processes, and the Hacking Defense Act will take effect on February
79

1st, 2015

80
81SECTION 4. All laws in conflict with this legislation are hereby declared null and void.
82
83
84Introduced by
85
86
87
88
89Timothy Koen
90
91
92