Cybersecurity Legislation On The Rise

At the end of 2021, forty-five states had passed or were considering new cybersecurity legislation. Most bills focused on increased requirements for:

• Formal policies, practices, and procedures
• Cybersecurity training
• Cyber incident response

Cybersecurity Safe Harbor was enacted in Connecticut, Ohio and Utah to provide incentives for proactive alignment to a recognized cybersecurity framework.

Georgia, Kansas, Michigan, Vermont, and Washington passed bills to exempt certain cybersecurity information from disclosure under public records laws.

Indiana requires reporting of ransomware incidents,?and North Carolina became the first state to prohibit government entities from paying ransomware demands.?Louisiana and Virginia adopted resolutions providing for cybersecurity studies.

Wondering what the latest requirements are in your state??The National Conference of State Legislatures provides an online list by State.