News on Medial

Companies grapple with expanding cyber rules

Livemint · 2m

Regulators are imposing strict reporting requirements on companies that fall victim to cyberattacks, leading to compliance challenges as the rules are inconsistent and overlapping. Organizations must comply with multiple federal demands, state regulations, and industry-specific requirements. The situation is further complicated by differing deadlines for reporting incidents. Regulators are pushing for faster notifications, creating a race to implement shorter reporting periods. Navigating these complexities and staying compliant is proving to be a heavy burden, especially for companies operating in multiple states and industries. Efforts to harmonize these regulations have been limited, and a recent Supreme Court decision may further complicate cybersecurity regulations by limiting the power of federal agencies.