MSPAlliance applauds the passage of Texas Senate Bill 2610

MSPAlliance, an industry association and certification body for Managed Service Providers (MSPs) applauded the recent passage of Texas Senate Bill 2610, effective from 1 September 2025.

This historic legislation establishes a legal safe harbor for eligible Texas businesses that maintain compliant cybersecurity programs, shielding them from exemplary (punitive) damages following a breach.

According to the company, this is precisely the approach advocated in MSPAlliance’s ‘Policy Approach to Comprehensive Cyber Legislation’ Position Paper.

SB 2610

MSPAlliance describes SB 2610 as:

Applies to Texas businesses with fewer than 250 employees that own or license data containing sensitive personal information.

Shields those businesses from exemplary (punitive) damages in breach-related litigation, provided they implemented and maintained an industry-compliant cybersecurity program at the time of the breach.

Frameworks must include administrative, technical and physical safeguards, whilst aligning with recognized standards, scaled by organization size:

• Fewer than 20 employees: basic password policies and cybersecurity training
• 20 to 99 employees: CIS Controls Implementation Group 1
• 100 to 249 employees: full frameworks such as NIST, ISO/IEC or similar

Why does this matter?

The vision MSPAlliance laid out in its Position Paper, to drive a policy that rewarded MSPs (and their clients) who follow validated cybersecurity practices, has become law.

Cyber Verify now serves as the trusted, standards-based certification path for MSPs to prove they meet these legal requirements.

Key benefits

According to the company, the key benefits include:

• Legal protection: Qualifying MSPs are shielded from punitive damages in breach events
• Credibility: Cyber Verify aligns with recognized frameworks required under SB 2610
• Competitive edge: Certified MSPs can confidently market compliance and enhanced client protection
• Scalability: Cyber Verify supports organizations across the compliance spectrum, from startup MSPs to mid-sized providers

Texas joins several other states, including Utah, Connecticut, Ohio and Iowa, who have passed similar cyber immunity/safe harbor laws in recent years.

“A direct path”

Celia Weaver, President and Co-Founder, MSPAlliance commented: “Texas SB 2610 validates the very framework we proposed in our Position Paper.

“With Cyber Verify, MSPAlliance now offers a direct path to achieving cybersecurity standards that deliver real legal protections.

“This makes Cyber Verify not just a certification, it is a necessity for any MSP serving Texas clients,” she concluded.