Senate Passes Significant Cyber Bill Requiring Cyber Incident Reporting

Keep up with what’s happening in privacy, data security, and all things cyber – from mandatory cyber-incident reporting to replacing the Privacy Shield to cryptocurrency developments – from our Privacy, Cyber & Data Strategy Group. 

The Senate and House are in session this week and will work to pass six of the 12 federal spending bills before a partial government shutdown on Friday. Once enacted, lawmakers must then turn to the remaining six bills, which have proven more contentious and difficult to resolve. Those funding bills are set to expire on March 22. On Thursday, President Biden will deliver his State of the Union address to Congress.

In the wake of widespread ransomware attacks, the newly enacted Strengthening American Cybersecurity Act will require “covered entities” to report data breaches to federal regulators. Our Privacy, Cyber & Data Strategy Team answers pressing questions about the new law.

On December 7, 2021, the House of Representatives passed the National Defense Authorization Act for Fiscal Year 2022 (NDAA), which notably excluded any cybersecurity incident reporting requirements. In September, the House approved a previous version of the bill that included a mandatory breach notification provision that would have required the Department of Homeland Security’s Cybersecurity […]

The post The Cybersecurity Incident Reporting Requirements Fail in the Latest Version of the National Defense Authorization Act appeared first on Alston & Bird Privacy, Cyber & Data Strategy Blog.