§ 11-49.3-7 — § 11-49.3-7. Notification of cybersecurity incident.

Rhode Island § 11-49.3-7

• Jurisdiction: Rhode Island
• Title 11: Criminal Offenses
• Ch. 11-49.3: Identity Theft Protection Act of 2015

Text

§ 11-49.3-7. Notification of cybersecurity incident.

(a) Any municipal agency or state agency that detects a cybersecurity incident shall provide notification to the Rhode Island state police upon detection of the cybersecurity incident within twenty-four (24) hours.

(b) Any municipal agency or state agency required to make notification under this section and fails to do so may be liable for a violation as set forth in § 11-49.3-5.

(c) The notification shall include, at a minimum, the following information to the extent known:

(1) A general and brief description of the incident, including how the cybersecurity incident occurred; and

(2) The date of the cybersecurity incident, estimated date of the cybersecurity incident, or the date range within which the cybersecurity incident occurred.

Legislative History

P.L. 2023, ch. 375, § 2, effective June 27, 2023.