1.1 	A bill for an act
1.2 	relating to state government; establishing a Legislative Commission on 
1.3 	Cybersecurity; providing legislative appointments;proposing coding for new law 
1.4 	in Minnesota Statutes, chapter 3.
1.5 	BE IT ENACTED BY THE LEGISLATURE OF THE STATE OF MINNESOTA:

1.6 	Section 1. [3.888] LEGISLATIVE COMMISSION ON CYBERSECURITY.
1.7 		Subdivision 1.Membership. The Legislative Commission on Cybersecurity consists 
1.8 	of the following eight members:
1.9 	(1) four senators, including two senators appointed by the senate majority leader and 
1.10 	two senators appointed by the senate minority leader; and
1.11 	(2) four members of the house of representatives, including two members appointed by 
1.12 	the speaker of the house and two members appointed by the minority leader of the house.
1.13 		Subd. 2.Terms; vacancies. Members of the commission serve for a two-year term 
1.14 	beginning upon appointment and expiring on appointment of a successor after the opening 
1.15 	of the next regular session of the legislature in the odd-numbered year. A vacancy in the 
1.16 	membership of the commission must be filled for the unexpired term in a manner that will 
1.17 	preserve the representation established by this section.
1.18 		Subd. 3.Duties. The commission shall provide oversight of the state's cybersecurity 
1.19 	measures.  The commission shall review the policies and practices of state agencies with 
1.20 	regard to cybersecurity and may recommend changes in policy to adequately protect the 
1.21 	state from cybersecurity threats. The commission may develop recommendations and draft 
1.22 	legislation to support and strengthen the state's cybersecurity infrastructure.
2.1 		Subd. 4.Chair. The commission shall elect a chair by a majority vote of members 
2.2 	present. The officers shall alternate between a member of the senate and a member of the 
2.3 	house of representatives. A chair shall serve a two-year term expiring upon election of a 
2.4 	new chair after the opening of the next regular session of the legislature in the odd-numbered 
2.5 	year.
2.6 		Subd. 5.Meetings. The commission must meet at least three times per calendar year. 
2.7 	The meetings of the commission are subject to section 3.055, except that the commission 
2.8 	may close a meeting when necessary to safeguard the state's cybersecurity. The minutes, 
2.9 	recordings, and documents from a closed meeting under this subdivision shall be maintained 
2.10 	by the Legislative Coordinating Commission and shall not be made available to the public 
2.11 	until eight years after the date of the meeting.
2.12 		Subd. 6.Administration. The Legislative Coordinating Commission shall provide 
2.13 	administrative services for the commission.
2.14 		Subd. 7.Sunset. The commission sunsets December 31, 2028.

2.15 	EFFECTIVE DATE. This section is effective the day following final enactment.

2.16 	Sec. 2. FIRST APPOINTMENTS AND FIRST MEETING OF LEGISLATIVE 
2.17 	COMMISSION ON CYBERSECURITY.
 2.18 		Subdivision 1.First appointments. Appointing authorities must make initial 
2.19 	appointments to the Legislative Commission on Cybersecurity within 60 days after final 
2.20 	enactment.
2.21 		Subd. 2.First meeting. The majority leader of the senate shall designate one senate 
2.22 	member of the Legislative Commission on Cybersecurity under Minnesota Statutes, section 
2.23 	3.888, to convene the first meeting within 105 days after final enactment. The commission 
2.24 	must select a chair from among the senate members at the first meeting.
2.25 		Subd. 3.Meetings in 2021. Notwithstanding Minnesota Statutes, section 3.888, 
2.26 	subdivision 5, the commission must meet at least twice in 2021.

2.27 	EFFECTIVE DATE. This section is effective the day following final enactment.