United States of America: Cyber incident reporting requirement in Cyber Incident Reporting Act
Progress
Current status
rejected
03 Jan 2023 rejected
28 Sep 2021 under deliberation
Scope
Implementers
United States of America
Policy Area
Data governance
Policy Instrument
Cybersecurity regulation
Regulated Economic Activity
cross-cutting
Government Branch
legislature
Government Body
parliament
Implementation Level
national
Timeline of events
Rejected Cyber Incident Reporting Act of 2021 (S.2875) including cyber incident reporting requirement
On 3 January 2023, the Cyber Incident Reporting for Critical Infrastructure Act of 2021 was rejected after failing to pass before the 117th Congress adjourned.
Event type
law
Action type
rejection
Government branch
legislature
Government body
parliament
Introduction of Cyber Incident Reporting Act 2021 including cyber incident reporting requirement in US Senate
Draft Bill S.2875, the Cyber Incident Reporting Act 2021, has been introduced in the US Senate. The draft bill stipulates that critical infrastructure operators must report cyber attacks to the Director of the Cybersecurity and Infrastructure Securi…
Event type
law
Action type
introduction
Government branch
legislature
Government body
parliament