Statutory Cyber Incident Reporting in the USA
Plan B Consulting
OCTOBER 17, 2022
The first state to have this type of law was California in 2003 and all states have, on the whole, followed the basic tenets of their law. I haven’t seen anything which covers any penalties for failure to report an applicable cyber incident. Securities and Exchange Commission (SEC) Proposed Rules.
40 
Let's personalize your content