Congress Circulates A Federal Breach Notification Bill

Will increased Federal focus on cybersecurity change the data breach protocol for businesses?

A draft of a federal breach notification bill is currently circulating in Congress. Although not formally introduced to the Senate, the draft legislation requires federal agencies, federal contractors, private sector "critical infrastructure owners and operators," and companies that respond to cybersecurity incidents to report significant "cybersecurity intrusions" to DHS's Cybersecurity and Infrastructure Security Agency within 24 hours of discovery. Affected entities would be further required to disclose affected networks and the tactics employed in the incident, as well as provide regular updates.