The amendment narrowed scope and replaced the original penalty structure with caps of USD 1 million and USD 3 million. Together with SB 53 it makes a documented frontier security programme a legal expectation in the two largest US technology states.
What to do: frontier developers should reconcile their published frameworks against both statutes' incident definitions and clocks; enterprise buyers can use the published protocols as due diligence.
