Bill Text: MI HB5257 | 2017-2018 | 99th Legislature | Introduced

NOTE: There are more recent revisions of this legislation. Read Latest Draft
Bill Title: Crimes; computer; penalties for possession and use of ransomware without authorization; provide for. Amends 1931 PA 328 (MCL 750.1 - 750.568) by adding sec. 409b.

Spectrum: Partisan Bill (Republican 1-0)

Status: (Passed) 2018-04-10 - Assigned Pa 95'18 With Immediate Effect [HB5257 Detail]

Download: Michigan-2017-HB5257-Introduced.html

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

HOUSE BILL No. 5257

 

 

November 28, 2017, Introduced by Reps. Iden, Lower, Griffin, Sheppard, Glenn, McCready, Phelps, Webber, Hertel and Lasinski and referred to the Committee on Commerce and Trade.

 

     A bill to amend 1931 PA 328, entitled

 

"The Michigan penal code,"

 

(MCL 750.1 to 750.568) by adding section 409b.

 

THE PEOPLE OF THE STATE OF MICHIGAN ENACT:

 

     Sec. 409b. (1) A person shall not knowingly possess ransomware

 

with the intent to use or employ that ransomware for the purpose of

 

introduction into the computer, computer data, computer system, or

 

computer network of another person, without authorization of the

 

other person. A person who violates this section is guilty of a

 

felony punishable by imprisonment for not more than 10 years.

 

     (2) As used in this section, "ransomware" means a computer or

 

data contaminant, encryption, or lock that has the ability to be

 

placed or introduced without authorization into a computer,


computer system, or computer network and that restricts access by

 

an authorized person to a computer, computer data, computer system,

 

or computer network in a manner that enables the person responsible

 

for the placement or introduction of the ransomware to demand

 

payment of money or other consideration to remove the computer

 

contaminant, restore access to the computer, computer system,

 

computer network, or data, or otherwise remediate the impact of the

 

computer contaminant or lock. Ransomware does not include

 

authentication required to upgrade or access purchased content.

 

     Enacting section 1. This amendatory act takes effect 90 days

 

after the date it is enacted into law.

feedback