News & Analysis as of

Cybersecurity › Ransomware › New Legislation

Follow this channel for advisories on one of the biggest threats to businesses today. Read a morning brief of fresh guidance and commentary by leading lawyers on security, privacy, risk... more +
Follow this channel for advisories on one of the biggest threats to businesses today. Read a morning brief of fresh guidance and commentary by leading lawyers on security, privacy, risk management, global regulations, data protection, leaks, hacking, cyber insurance, compliance, HIPAA, and every other aspect of cybersecurity of import to corporate readers right now.   less -
Harris Beach Murtha PLLC

NY Municipalities, Public Authorities Must Report Cybersecurity Incidents

Harris Beach Murtha PLLC on

A state law requiring municipalities and public authorities to report cybersecurity incidents within 72 hours and ransomware payments within 24 hours compels New York governments to ensure they have protocols in place to...more

Spilman Thomas & Battle, PLLC

Decoded - Technology Law Insights, V 6, Issue 7, July 2025

Spilman Thomas & Battle, PLLC on

Welcome to our seventh issue of 2025 of Decoded - our technology law insights e-newsletter. What does the US GENIUS Act Mean for Stablecoins? “The White House categorically states it is a historic piece of legislation that...more

Bricker Graydon LLP

Ohio House Bill 96 Ushers in New Era of Cybersecurity Compliance for Local Governments and School Districts

Bricker Graydon LLP on

On June 30, 2025, Governor Mike DeWine signed into law (HB 96), a cybersecurity mandate that applies to all political subdivisions in Ohio—including counties, municipalities, townships, and school districts. ...more

DLA Piper

Italy: Ransomware and Crime – A Proposal to Tackle Cyber Extortion in Italy

DLA Piper on

The potential criminalization of activities associated with ransomware cyber attacks, including ransom payments by victims, has long been an unresolved issue. This concern has now led Italy to introduce a ground breaking...more

K&L Gates LLP

Pay the Price, Now ‘Fess Up’: Reporting Obligations for Ransomware Payments Are Live

K&L Gates LLP on

As of 29 May 2025, the requirement on businesses to report ransomware payments they make has come into effect. What is the Requirement? If a reporting business entity becomes impacted by a cyber security incident and ends up...more

Hogan Lovells

Australia mandates first-of-its-kind reporting of ransomware payments

Hogan Lovells on

Australia has implemented a first-of-its kind requirement for eligible businesses to report ransomware payments. From 30 May 2025, eligible businesses that make a payment in response to a cyber security incident, or become...more

BakerHostetler

Australia’s New Ransomware Payment Reporting Law Takes Effect, Covering Both Critical Infrastructure and Other Entities

BakerHostetler on

On May 30, the ransomware payment reporting requirements of Australia’s Cyber Security Act 2024 (CSA) took effect. The new requirement applies to a broad range of entities and cyber security incidents, requiring reporting...more

Clark Hill PLC

The Learned Concierge - May 2025, Vol. 19

Clark Hill PLC on

Welcome to your monthly legal insights on the trends impacting the Retail, Hospitality, and Food & Beverage Industries. Alcohol Law - New Colorado Law Limits Grocery Stores’ Ability to Sell Hard Alcohol - Michael...more

DLA Piper

Australia: Privacy Act Amendments and Cyber Security Act Become Law

DLA Piper on

On 29 November 2024, the Australian Senate passed the Privacy and Other Legislation Amendment Bill 2024 (Cth) (the Privacy Act Bill).  This follows the passage of the Cyber Security Act 2024 (Cth), and other cyber-security...more

Epstein Becker & Green

HISAA: New Legislation Would Bring Cybersecurity Requirements for HIPAA Covered Entities and Business Associates

Epstein Becker & Green on

In response to several high-profile cybersecurity incidents affecting hospitals and other health care providers, including the Change Healthcare breach, new federal legislation was recently introduced by Senators Ron Wyden...more

Bradley Arant Boult Cummings LLP

Ransomware Reckoning – The New Bill Changes the Game

Bradley Arant Boult Cummings LLP on

The Intelligence Authorization Act for Fiscal Year 2025 (S.4443) is a bold legislative step in addressing ransomware as a critical threat. The act’s provisions, from elevating ransomware to a national intelligence priority to...more

Spilman Thomas & Battle, PLLC

Decoded - Technology Law Insights, V 5, Issue 1, January 2024

Spilman Thomas & Battle, PLLC on

The Current Status of Privacy Laws Across the United States - Unlike the General Data Protection Regulation (GDPR) in the European Union (EU), the United States does not have a nationwide comprehensive data privacy law....more

Spilman Thomas & Battle, PLLC

The Academic Advisor - Education Law Insights, Issue 5, May 2023

Spilman Thomas & Battle, PLLC on

Summer is Coming: Are Youth Camps Part of Your Clery Compliance Program? “Regarding compliance and safety, many institutions have youth protection policies that camps must follow.” Why this is important: The Jeanne...more

Polsinelli

Cyber Incident Reporting for Critical Infrastructure Act: Significant Changes to Incident Reporting Are on the Horizon

Polsinelli on

In May 2021, Colonial Pipeline, a privately held oil pipeline responsible for nearly half of the oil supply for the U.S. East Coast, was crippled by a DarkSide ransomware attack. DarkSide is widely believed to be a...more

Bass, Berry & Sims PLC

2023 Healthcare Private Equity Outlooks & Trends

Bass, Berry & Sims PLC on

As we kick off 2023, we are optimistic that the healthcare private equity (PE) market will be resilient despite various headwinds. As you think ahead, please consider the issues and trends summarized below that may be helpful...more

BCLP

Cyber Incident Reporting for Critical Infrastructure Act - What Companies Need to Know Now

BCLP on

The Cyber Incident Reporting for Critical Infrastructure Act (“CIRCIA” or “the Act”) is a new federal law, adopted in March 2022, which requires critical infrastructure entities to report certain cybersecurity incidents and...more

Robinson & Cole LLP

Data Privacy + Cybersecurity Insider - May 2022 #2

Robinson & Cole LLP on

CYBERSECURITY NIST - Releases Guidance on Supply Chain Security - The National Institute of Standards and Technology (NIST) Information Technology Laboratory recently released guidance entitled “Software Supply Chain...more

Nelson Mullins Riley & Scarborough LLP

Not in My Backyard: NC Becomes First State to Prohibit Public Entities from Paying Ransoms

Nelson Mullins Riley & Scarborough LLP on

As part of the budget appropriations law enacted on November 18, 2021, North Carolina became the first state in the nation to prohibit state agencies and local government entities from paying a ransom following a ransomware...more

Faegre Drinker Biddle & Reath LLP

Congress Passes New Cyber Incident and Ransomware Payment Reporting Legislation

Faegre Drinker Biddle & Reath LLP on

The United States Congress recently passed legislation that includes new cybersecurity provisions requiring critical infrastructure providers to report cyber security incidents, including the payment of ransom, to the...more

Woods Rogers

New Notification Requirements for Critical Infrastructure

Woods Rogers on

President Joe Biden recently signed into law the Cyber Incident Reporting For Critical Infrastructure Act of 2022. This new law updates the Federal Information Security Modernization Act (FISMA)...more

Jenner & Block

The Cyber Incident Reporting for Critical Infrastructure Act of 2022

Jenner & Block on

On March 15, 2022, President Biden signed into law the “Cyber Incident Reporting for Critical Infrastructure Act of 2022” (the Act) as part of the 2022 federal funding bill. Among other things, the Act requires critical...more

BakerHostetler

Sounding the Alarm: New Federal Law Will Mandate the Reporting of Cybersecurity Incidents Involving Critical Infrastructure - What...

BakerHostetler on

In response to increased and persistent cybersecurity threats to American infrastructure, Congress passed the Strengthening American Cybersecurity Act (SACA), which President Joe Biden signed into law on March 15. SACA is...more

Alston & Bird

New Cybersecurity Law Will Require Cyber-Incident Reporting for Critical Infrastructure

Alston & Bird on

On March 1, the Senate unanimously passed the Strengthening American Cybersecurity Act of 2022, which will require critical infrastructure companies to report significant cyber-incidents and all ransom payments to the...more

Holland & Knight LLP

Cyber Incident Reporting Requirements for Critical Infrastructure Sectors Signed into Law

Holland & Knight LLP on

After years of debate, Congress has passed bipartisan legislation requiring owners and operators of critical infrastructure to report cyber incidents to the U.S. Department of Homeland Security (DHS) Cybersecurity and...more

Womble Bond Dickinson

[Webinar] Moving Targets While Under Fire – Aligning with New Data Laws While Hackers and Customers Bring Pressure - April 5th,...

Womble Bond Dickinson on

In the past 5 years businesses felt the increasingly intricate data management rules (GDPR, CCPA, BIPA) pressed against an explosion in hacking and ransomware. Companies experience pressure from legislators, regulators,...more

33 Results
 / 
View per page
Page: of 2
Next »

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:
Sign up Log in
*By using the service, you signify your acceptance of JD Supra's Privacy Policy.
- hide
- hide