Sec. 7. Agency requirements to notify private sector entities impacted by incidents
179 words·~1 min read·
/bill/118/hr/4552/ih/section-7A research copy — for the controlling text, always check the official state or federal source. Not legal advice.
In this section: The term reporting entity means private organization or governmental unit that is required by statute or regulation to submit sensitive information to an agency. The term sensitive information has the meaning given the term by the Director in guidance issued under subsection (b). Not later than 1 year after the date of enactment of this Act, the Director shall develop, in consultation with the National Cyber Director, and issue guidance requiring the head of each agency to notify a reporting entity, and take into consideration the need to coordinate with Sector Risk Management Agencies (as defined in section 2200 of the Homeland Security Act of 2002 ( 6 U.S.C. 650 )), as appropriate, of an incident at the agency that is likely to substantially affect— the confidentiality or integrity of sensitive information submitted by the reporting entity to the agency pursuant to a statutory or regulatory requirement; or any information system (as defined in section 3502 of title 44, United States Code) used in the transmission or storage of the sensitive information described in paragraph (1).
Connectionstraces to 1
Traces to 1 document
U.S. Code
Citation graph
cites case law
Sec. 7
Agency requirements to notify private sector entities impacted by incidents
Cites 1Cited by 0 across 0 sources