Sec. 105. Agency requirements to notify private sector entities impacted by incidents
128 words·~1 min read·
/bill/117/hr/6497/ih/section-105A research copy — for the controlling text, always check the official state or federal source. Not legal advice.
In this section: The term reporting entity means private organization or governmental unit that is required by statute or regulation to submit sensitive information to an agency. The term sensitive information has the meaning given the term by the Director in guidance issued under subsection (b). Not later than 180 days after the date of the enactment of this Act, the Director shall issue guidance requiring the head of each agency to notify a reporting entity of an incident that is likely to substantially affect— the confidentiality or integrity of sensitive information submitted by the reporting entity to the agency pursuant to a statutory or regulatory requirement; or the agency information system or systems used in the transmission or storage of the sensitive information described in paragraph (1).