Section 11-49.3-7 - Notification of cybersecurity incident(a) Any municipal agency or state agency, that detects a cybersecurity incident shall provide notification to the Rhode Island state police upon detection of the cybersecurity incident within twenty-four (24) hours.(b) Any municipal agency or state agency, required to make notification under this section and fails to do so may be liable for a violation as set forth in § 11-49.3-5.(c) The notification shall include, at a minimum, the following information to the extent known: (1) A general and brief description of the incident, including how the cybersecurity incident occurred; and(2) The date of cybersecurity incident, estimated date of cybersecurity incident, or the date range within which the cybersecurity incident occurred.R.I. Gen. Laws § 11-49.3-7
Added by 2023 Pub. Laws, ch. 375,§ 2, eff. 6/27/2023.