Requires policies covering losses or damages from cyberattacks to include a requirement that the insured notify a law enforcement agency before receiving payment for losses or damages suffered as a result of the cyberattack.
Summary
Bill A01239, known as the 'Cyber Ransom Prevention Act', amends the New York insurance law to mandate that any insurance policy covering losses or damages resulting from cyberattacks requires the insured party to notify law enforcement within seventy-two hours of discovering the cyberattack. This requirement is intended to enhance the response to cyber incidents and potentially aid in the investigation and mitigation of such attacks.
Impact
The bill will significantly affect corporate and business entities that hold insurance policies for cyberattack-related damages. By enforcing a notification requirement to law enforcement, it aims to improve the overall cybersecurity landscape in New York. This could lead to increased collaboration between businesses and law enforcement agencies, potentially resulting in more effective responses to cyber threats and a reduction in the frequency and severity of cyberattacks.
Sentiment
The general sentiment surrounding Bill A01239 appears to be cautiously supportive, with recognition of the necessity for improved cybersecurity measures. However, there are concerns regarding the feasibility of the notification timeline and the potential burden it places on businesses during a crisis.
Contention
Notable points of contention include the practicality of the seventy-two-hour notification requirement, with some stakeholders arguing that it may be difficult for businesses to comply while managing the immediate aftermath of a cyberattack. Additionally, there are concerns about the implications for insurance claims processing and the potential for increased premiums as a result of the new requirement.