1. (a) Any municipal agency or state agency that detects a cybersecurity incident shall provide notification to the Rhode Island state police upon detection of the cybersecurity incident within twenty-four (24) hours.
2. (b) Any municipal agency or state agency required to make notification under this section and fails to do so may be liable for a violation as set forth in § 11-49.3-5.

3. (c) The notification shall include, at a minimum, the following information to the extent known:

   1. (1) A general and brief description of the incident, including how the cybersecurity incident occurred; and
   2. (2) The date of the cybersecurity incident, estimated date of the cybersecurity incident, or the date range within which the cybersecurity incident occurred.

History of Section.
P.L. 2023, ch. 375, § 2, effective June 27, 2023.