(a) Any municipal agency or state agency that detects a cybersecurity incident shall provide notification to the Rhode Island state police upon detection of the cybersecurity incident within twenty-four (24) hours. (b) Any municipal agency or state agency required to make notification under this section and fails to do so may be liable for a violation as set forth in § 11-49.3-5. (c) The notification shall include, at a minimum, the following information to the extent known: (1) A general and brief description of the incident, including how the cybersecurity incident occurred; and (2) The date of the cybersecurity incident, estimated date of the cybersecurity incident, or the date range within which the cybersecurity incident occurred.
‹ Prev All Rhode Island sections Next ›
Lexace provides legal information, not legal advice, and no attorney–client relationship is created. Statute text is provided for general information and may not reflect the most recent amendments; verify against the official state code.