HB1132 • 2026

RELATING TO CRITICAL INFRASTRUCTURE.

Active

The official status still shows this bill as active or still awaiting another formal step.

Sponsor: NAKAMURA (Introduced by request of another party)
Last action: 2025-12-08
Official status: Carried over to 2026 Regular Session.
Effective date: Not listed

Plain English Breakdown

The bill summary does not provide specific details about the consequences of breaking confidentiality rules.

Protecting Critical Infrastructure Information

This bill makes critical infrastructure information confidential when it's received or maintained by the Office of Homeland Security, except in certain cases.

What This Bill Does

Makes sure that information about critical infrastructure security is kept secret unless there are special reasons to share it.
Allows the Office of Homeland Security to share this secret information with other government agencies if needed for safety and security purposes.

Who It Names or Affects

The Office of Homeland Security
Federal, state, and county agencies within Hawaii

Terms To Know

Critical Infrastructure Information: Information related to the security of important systems that are vital for public health, safety, and economic stability.

Limits and Unknowns

The bill does not specify what happens if someone breaks these confidentiality rules.
It is unclear how this will affect existing laws about accessing government records.

Amendments

These notes stay tied to the official amendment files and metadata from the legislature.

HD1

Hawaii published version HD1

Plain English: This amendment makes critical infrastructure information received by the Office of Homeland Security confidential, allowing it to be shared only with federal agencies and state and county agencies for security purposes.

Adds a new section to Hawaii Revised Statutes Chapter 128A to make critical infrastructure information confidential.
Specifies that this information can be shared with federal and state agencies but must remain confidential.
Defines 'critical infrastructure information' as data related to the security of critical systems, including vulnerabilities and operational issues.

The amendment's effective date is set for July 1, 3000, which seems unusual and may be a placeholder or error.

Bill History

2025-12-08 D
Carried over to 2026 Regular Session.
2025-02-04 H
Re-referred to WAL, JHA, referral sheet 11
2025-02-04 H
Passed Second Reading as amended in HD 1 and referred to the committee(s) on PBS with Representative(s) Amato, Garcia voting aye with reservations; none voting no (0) and Representative(s) Cochran, Kong, Ward excused (3).
2025-02-04 H
Reported from WAL (Stand. Com. Rep. No. 145) as amended in HD 1, recommending passage on Second Reading and referral to PBS.
2025-01-30 H
The committee on WAL recommend that the measure be PASSED, WITH AMENDMENTS. The votes were as follows: 8 Ayes: Representative(s) Hashem, Lamosao, Belatti, Ichiyama, Morikawa, Poepoe, Shimizu, Souza; Ayes with reservations: none; 1 Noes: Representative(s) Iwamoto; and 1 Excused: Representative(s) Woodson.
2025-01-27 H
Bill scheduled to be heard by WAL on Thursday, 01-30-25 9:00AM in House conference room 411 VIA VIDEOCONFERENCE.
2025-01-23 H
Referred to WAL, PBS, JHA, referral sheet 3
2025-01-23 H
Introduced and Pass First Reading.
2025-01-21 H
Pending introduction.

Official Summary Text

RELATING TO CRITICAL INFRASTRUCTURE.
Homeland Security; Uniform Information Practices; Critical Infrastructure Information
Makes critical infrastructure information received or maintained by the Office of Homeland Security confidential, except in certain circumstances. Effective 7/1/3000. (HD1)

Current Bill Text

Read the full stored bill text

HB1132

HOUSE OF REPRESENTATIVES

H.B. NO.

1132

THIRTY-THIRD LEGISLATURE, 2025

STATE OF HAWAII

A BILL FOR AN ACT

RELATING
TO CRITICAL INFRASTRUCTURE
.

BE IT ENACTED BY THE LEGISLATURE OF THE STATE OF HAWAII:

����
SECTION 1.
�
The legislature finds that in order to
succeed in the responsibilities of the State to provide homeland security under
chapter 128A, Hawaii Revised Statutes, it is necessary to establish protections
for critical infrastructure information.

����
The
purpose of this Act is to establish and specify protections for information
that is received or maintained by the office of homeland security regarding the
security of critical infrastructure and protected systems, analysis, warning,
interdependency study, recovery, reconstitution or other informational
purposes.

����
SECTION 2.
�
Chapter 128A, Hawaii Revised Statutes, is
amended by adding to part I a new section to be appropriately designated and to
read as follows:

����
"
�128A-
��
��
Confidentiality
of critical infrastructure information.
�

(a)
�
Notwithstanding section
92F-11 and any other law to the contrary, critical infrastructure information
received or maintained by the office of homeland security in connection with
the Hawaii state critical infrastructure security and resilience program shall
be confidential and shall not be disclosed, except as provided in subsection
(b).

����
(b)
�
The office of homeland security may share
confidential critical infrastructure information received or maintained under
subsection (a) with federal agencies and state and county agencies within the
State for the purposes of the security of critical infrastructure of protected
systems; provided that the information shall remain confidential and shall not
be disclosed by the receiving agency to the public.

����
(c)
�
Nothing contained in this section shall be
construed to alter existing rights to access government records subject to chapter
92F from an agency other than the office of homeland security and state and
county agencies receiving confidential critical infrastructure information
under subsection (b).
"

����
SECTION
3.
�
Section 128A-2, Hawaii Revised
Statutes, is amended by adding a new definition to be appropriately inserted
and to read as follows:

����
"
"Critical
infrastructure information" means information that is not customarily in
the public domain and is related to the security of critical infrastructure or
protected systems, including documents, records or other information
concerning:

����
(1)
�
Actual, potential, or threatened
interference with, attack on, compromise of, or incapacitation of critical
infrastructure or protected systems by either physical or computer-based attack
or other similar conduct, including the misuse of or unauthorized access to all
types of communications and data transmission systems, that violates federal,
state, local, or tribal law, harms interstate commerce of the United States, or
threatens public health or safety;

����
(2)
�
The ability of any critical
infrastructure or protected system to resist such interference, compromise, or
incapacitation, including any planned or past assessment, projection, or
estimate of the vulnerability of critical infrastructure or a protected system,
including security testing, risk evaluation thereto, risk-management planning,
or risk audit; or

����
(3)
�
Any planned or past operational
problem or solution regarding critical infrastructure or protected systems,
including repair, recovery, reconstruction, insurance, or continuity, to the
extent that it is related to the interference, compromise, or incapacitation.
"

����
SECTION
4.
�
New statutory material is
underscored.

����
SECTION
5.
�
This Act shall take effect upon its
approval.

INTRODUCED BY:

_____________________________

BY REQUEST

Report Title:

Homeland
Security; Uniform Information Practices; Critical Infrastructure Information

Description:

Enhances
sharing of critical infrastructure information between infrastructure owners
and operators and the state government.
�

Defines and protects "critical infrastructure information"
that is crucial for direct support of the security and resilience of the
State.
�
Provides homeland security
partners with reassurance that their proprietary information provided to the
state government will be protected from disclosure.

The summary description
of legislation appearing on this page is for informational purposes only and is
not legislation or evidence of legislative intent.